last executing test programs:

16m43.527168291s ago: executing program 2 (id=22668):
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100), &(0x7f0000000000))
io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
close(r1)

16m43.304224165s ago: executing program 2 (id=22670):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x29, 0x4b, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x9, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0xd, 0x6}, @sack_perm, @window={0x3, 0x6, 0x6}, @timestamp, @mss, @window={0x3, 0x1, 0x5}], 0x6)
socket$kcm(0xa, 0x2, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44)
socket$inet6(0x10, 0x2, 0x4)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x4030582a, &(0x7f0000000040)={'veth0_vlan\x00'})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x8001, @loopback, 0xac}, @in6={0xa, 0x4e20, 0x2, @empty, 0x5}], 0x38)

16m43.233673858s ago: executing program 2 (id=22672):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
open(&(0x7f0000000580)='./file1\x00', 0x860c2, 0xf7)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000007c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x25, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x8001, @loopback, 0xac}, @in6={0xa, 0x4e20, 0x2, @empty, 0x5}], 0x38)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)

16m43.113899942s ago: executing program 2 (id=22675):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100))
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket(0x22, 0x2, 0x3)
close(0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000005, 0x10, r1, 0x8000000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x110, &(0x7f0000000000)=0x6, 0x0, 0x4)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r1, 0x0)
madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10)
r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r7 = io_uring_setup(0xbbc, &(0x7f00000001c0)={0x0, 0x800000, 0x2, 0x0, 0x112})
io_uring_enter(r7, 0x100000, 0x2, 0xf, 0x0, 0x0)
mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000b, 0x1010, r0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f000087b000/0x2000)=nil, 0x2000, 0xa, 0x4010, r6, 0x10000000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x40010, r3, 0x0)
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)

16m42.438824595s ago: executing program 2 (id=22684):
socket$inet_udp(0x2, 0x2, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x135941, 0x0)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x1af0, 0x100, 0x40000002, 0xbfdffffe}, &(0x7f0000000000), &(0x7f0000000280))
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi5\x00', 0x400, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000007c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000180)=[{0x0}], 0x1})
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0xfe064000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)

16m42.052884558s ago: executing program 2 (id=22687):
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x40802, 0x0)
socket(0x1, 0xa, 0xbffffffe)
socket$xdp(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
socket$unix(0x1, 0x5, 0x0)
r0 = syz_io_uring_setup(0x7ad5, &(0x7f0000000640)={0x0, 0x48bc, 0x80, 0x3, 0x4000032f}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f00000007c0)=<r2=>0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000040)=0x7f, 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r5, &(0x7f0000000000)={0x1c000200e}, r5, 0x1, 0x0, 0x1, {0x0, r4}})
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x5c)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000080), 0x0, 0x4)
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)

16m27.020328674s ago: executing program 32 (id=22687):
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x40802, 0x0)
socket(0x1, 0xa, 0xbffffffe)
socket$xdp(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
socket$unix(0x1, 0x5, 0x0)
r0 = syz_io_uring_setup(0x7ad5, &(0x7f0000000640)={0x0, 0x48bc, 0x80, 0x3, 0x4000032f}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f00000007c0)=<r2=>0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000040)=0x7f, 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r5, &(0x7f0000000000)={0x1c000200e}, r5, 0x1, 0x0, 0x1, {0x0, r4}})
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x5c)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000080), 0x0, 0x4)
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)

7m49.622444044s ago: executing program 1 (id=27713):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0xf, 0x4)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x41, 0x0)
r3 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bb, 0x1, 0x5, 0x1c3}, &(0x7f0000000240)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f00000002c0)={0x2e, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x1, 'lc\x00', 0x9, 0x5, 0x25}, 0x2c)
setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f00000001c0)=0x1, 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e})
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000300)=0x1e, 0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xe099, 0x0, 0x1, 0xb5}, &(0x7f0000000000), &(0x7f0000000280))
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)

7m49.529040799s ago: executing program 1 (id=27714):
r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xe300, 0x0, 0x0, 0x293}, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000300))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100})
io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0)

7m49.314231551s ago: executing program 1 (id=27717):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x159)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x121200)
open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x67)
r1 = syz_io_uring_setup(0x236, &(0x7f0000000580)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000200))
r2 = eventfd(0xfca1)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000040)=r2, 0x1)
io_uring_enter(r1, 0x207a98, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000040)='/dev/ptmx\x00', 0xa)

7m49.191552764s ago: executing program 1 (id=27718):
openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x721102, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000040)={0x0, 0x7730, 0x20, 0x8, 0x270}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)

7m49.188576365s ago: executing program 1 (id=27720):
r0 = syz_io_uring_setup(0x4a8, &(0x7f0000000940)={0x0, 0xaedf, 0x80, 0x3, 0x2df}, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}})
io_uring_enter(r0, 0x32d7, 0x0, 0x46, 0x0, 0x0)

7m49.069627668s ago: executing program 1 (id=27722):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x802, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvtap0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10)
r3 = syz_io_uring_setup(0x210b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x2, 0x219, 0x0, r0}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345})
socket$key(0xf, 0x3, 0x2)
r6 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x515f, 0x10000, 0x0, 0x2a8}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r9 = syz_io_uring_setup(0x82a, &(0x7f0000000300)={0x0, 0x800cd1d, 0x10100, 0x1, 0x1001}, &(0x7f0000000000), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r10 = syz_io_uring_setup(0x49b, &(0x7f00000000c0)={0x0, 0xecb4, 0x3180, 0x0, 0x58, 0x0, r9}, &(0x7f0000000280)=<r11=>0x0, &(0x7f0000000040)=<r12=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x110, &(0x7f0000000000)=0x9, 0x0, 0x4)
r13 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
r14 = syz_io_uring_setup(0xbdc, &(0x7f00000007c0)={0x0, 0xec1d, 0x80, 0x2, 0x40000333}, &(0x7f0000000240)=<r15=>0x0, &(0x7f00000001c0)=<r16=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r15, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r15, r16, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r13, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r14, 0x847ba, 0x2000, 0xe, 0x0, 0x0)
syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1})
close(r10)
io_uring_enter(r10, 0x627, 0x4c1, 0x43, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x48, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x77359400}, 0x1, 0x10, 0x1})
io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r17 = syz_io_uring_setup(0x1da, &(0x7f00000000c0)={0x0, 0x7669, 0x8000, 0x1, 0x21a, 0x0, r3}, &(0x7f00000001c0), &(0x7f0000000400))
io_uring_register$IORING_UNREGISTER_FILES(r17, 0x3, 0x0, 0x0)
io_uring_enter(r3, 0x7277, 0x0, 0x0, 0x0, 0x0)

7m34.060275336s ago: executing program 33 (id=27722):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x802, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvtap0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10)
r3 = syz_io_uring_setup(0x210b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x2, 0x219, 0x0, r0}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345})
socket$key(0xf, 0x3, 0x2)
r6 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x515f, 0x10000, 0x0, 0x2a8}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r9 = syz_io_uring_setup(0x82a, &(0x7f0000000300)={0x0, 0x800cd1d, 0x10100, 0x1, 0x1001}, &(0x7f0000000000), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r10 = syz_io_uring_setup(0x49b, &(0x7f00000000c0)={0x0, 0xecb4, 0x3180, 0x0, 0x58, 0x0, r9}, &(0x7f0000000280)=<r11=>0x0, &(0x7f0000000040)=<r12=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x110, &(0x7f0000000000)=0x9, 0x0, 0x4)
r13 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
r14 = syz_io_uring_setup(0xbdc, &(0x7f00000007c0)={0x0, 0xec1d, 0x80, 0x2, 0x40000333}, &(0x7f0000000240)=<r15=>0x0, &(0x7f00000001c0)=<r16=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r15, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r15, r16, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r13, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r14, 0x847ba, 0x2000, 0xe, 0x0, 0x0)
syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1})
close(r10)
io_uring_enter(r10, 0x627, 0x4c1, 0x43, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x48, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x77359400}, 0x1, 0x10, 0x1})
io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r17 = syz_io_uring_setup(0x1da, &(0x7f00000000c0)={0x0, 0x7669, 0x8000, 0x1, 0x21a, 0x0, r3}, &(0x7f00000001c0), &(0x7f0000000400))
io_uring_register$IORING_UNREGISTER_FILES(r17, 0x3, 0x0, 0x0)
io_uring_enter(r3, 0x7277, 0x0, 0x0, 0x0, 0x0)

4m47.31720929s ago: executing program 0 (id=29364):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0x4)
close(r0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xc570, 0x8, 0x1, 0x40000332}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0xfffffffffffffd11)
socket(0x2, 0x3, 0xff)
socket(0x8, 0x4, 0x10000004)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0), 0x2041, 0x0)
r4 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$rxrpc(0x21, 0x2, 0xa)
r7 = syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0xbe74, 0x10100, 0xffffffff, 0x2a0}, &(0x7f00000001c0)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_POLL_ADD={0x6, 0x71, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4000}})
r10 = io_uring_setup(0x56d1, &(0x7f0000000240)={0x0, 0x94f0, 0x400, 0x1, 0x6})
syz_io_uring_setup(0x5cb7, &(0x7f00000001c0)={0x0, 0x790b, 0x1000, 0x3, 0x364, 0x0, r10}, &(0x7f0000000040), &(0x7f00000000c0))
io_uring_enter(r4, 0x207a98, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socket$inet_tcp(0x2, 0x1, 0x0)

4m46.877048934s ago: executing program 0 (id=29368):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x123780, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x31, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x410}, 0x0, {0x0, r4}})
mprotect(&(0x7f0000963000/0x3000)=nil, 0x3000, 0x5)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000280)=[0xd, 0x9], 0x2)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi5\x00', 0x880, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', <r6=>0x0})
setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f00000001c0)={0x1, 0x1, 0x8a, r6, 0xe30}, 0xc)
close(0x3)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x4018620d, &(0x7f0000000100)={'dummy0\x00'})

4m46.445114918s ago: executing program 0 (id=29371):
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc)

4m46.444602994s ago: executing program 0 (id=29372):
r0 = io_uring_setup(0x37b0, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x400022a})
io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4020940d, &(0x7f0000000100)={'dummy0\x00'})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100000002000000", 0xfe60)

4m46.376191037s ago: executing program 0 (id=29373):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0)
syz_io_uring_setup(0xd38, &(0x7f0000000300)={0x0, 0x7732, 0x80, 0x1, 0x350}, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000140)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x71, &(0x7f0000000000)="03040000008002ff", 0x8)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0)
r4 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x1, 0x10100, 0x0, 0x4}, &(0x7f0000000100)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r2, 0xffffffffffffff7f, &(0x7f0000001740)=[{&(0x7f0000001680)=""/161, 0xa1}], 0x1})
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r8 = syz_io_uring_setup(0x1239, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x2, 0xab9}, &(0x7f0000000040)=<r9=>0x0, &(0x7f0000001780)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x0, 0x0})
io_uring_enter(r8, 0x47bc, 0x0, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000001600)={&(0x7f0000002000)={[{&(0x7f0000000440)="a277801102fb9b886bbec8b04c8d59573c0a929b51d299e6b2566053998546c3d255defd1108c5c354c4c3b6646b9e3c173cf5c15401a4c7cb3a79ddef95b68bd6e58123dbff1fc1440236095ec95ca2516ff082d097ea1ea7e710c934c06b4e143404c290700ed059dd61ed7cdbe166f8ecfc6b02c0ce84a0226a0ab510c42ea14215f86b0f8fb1c47063694b6ba4ef98fe41096758c0e871112468e6ce5c8982f552df7c5ef97e653621826fbb02dcd308e53beb6ee277f4f72dc0bed6", 0xbe, 0x3}, {&(0x7f0000000240)="dcf41d914fbba0fd6766a40570aaed01716b989aaf971e40ee49bc316e018d1e59b885b302ce0d09c163ef603ce30b282ce2a23b08c06f018c23ca8e7c71b0fcdcac07b95e43e214ffc91311f9d7645a3258870aef2e53274b80bf48c823ddd23e65af6c45600e8c801c02106a5ca07a3e255d1803af60b8", 0x78, 0x2}, {&(0x7f0000000500)="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", 0x1000, 0x1}, {&(0x7f0000001500)="57f6ce4410382431cfd4dd3bfcc653ceeecd2a122cc9a762c65d263e2305c2a2f254e720771eb11e4ff69401f27e1795894fa8e984432ec9c773113d99d56fc72a5a0fa60b55fd713010a5d2ff35d03f215639666c802fd761cfb13f50f17e5491d6c7baf762b70107ebd627b773d133f10fec878004f1194aa9911c82eb096c556bf695d423efcfa3e047eee217c0c8189585395456bc4689e83c9cb5a5c337f7569fb34b04a56a71ffa626d28fa2e43a983c42d2fe149adb78c3ab82adbafa8e76cf189392762bf43c48a41926", 0xce, 0x3}, {&(0x7f0000000080)="f491213f40a2163af195176df54bf8320454ef7b5c858c580d9ab11bf9727128215e56fb1d833d382b368080e6673d4782c31d27c3e6f2e672", 0x39}]}, 0x5, 0x3}, 0x1)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x4, @local, 0x39}], 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000525000/0x1000)=nil, 0x1000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f000022e000/0x2000)=nil, 0x2000, 0x2000001)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20})

4m46.310203886s ago: executing program 0 (id=29375):
r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x4525, 0x0, 0x0, 0x12d}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000640)=<r2=>0x0)
syz_io_uring_setup(0x584d, &(0x7f0000000380)={0x0, 0x8aec, 0x10, 0x0, 0x101}, &(0x7f0000000240), &(0x7f0000000040)) (async)
r3 = syz_io_uring_setup(0x584d, &(0x7f0000000380)={0x0, 0x8aec, 0x10, 0x0, 0x101}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
mmap$IORING_OFF_CQ_RING(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r0, 0x8000000)
syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x880, 0x2, 0x0, 0x127, 0x0, 0x0, {0x2}})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r7 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x2, 0x39a}, &(0x7f00000002c0)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0x11, &(0x7f0000000100)=0x7f, 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r7, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) (async)
io_uring_enter(r7, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
io_uring_enter(r3, 0x6efc, 0x3900, 0xb, 0x0, 0x0)
r11 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
close(r11) (async)
close(r11)
io_uring_setup(0x24d, &(0x7f0000000180)={0x0, 0x6549, 0x20000, 0x0, 0x17b, 0x0, r3}) (async)
r12 = io_uring_setup(0x24d, &(0x7f0000000180)={0x0, 0x6549, 0x20000, 0x0, 0x17b, 0x0, r3})
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r12, 0x18, &(0x7f00000000c0)={0x2008000, r3, 0x12, {0x6, 0x1}, 0x5}, 0x1) (async)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r12, 0x18, &(0x7f00000000c0)={0x2008000, r3, 0x12, {0x6, 0x1}, 0x5}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r13 = syz_io_uring_setup(0x1881, &(0x7f0000000880)={0x0, 0x17e8, 0x200, 0x102, 0x3c2}, &(0x7f0000000580), &(0x7f0000000900))
io_uring_register$IORING_UNREGISTER_NAPI(r13, 0x1c, &(0x7f0000001980), 0x1)
socket$inet6(0xa, 0x80002, 0x0) (async)
socket$inet6(0xa, 0x80002, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x3, 0xfffffffe}, &(0x7f0000000180), &(0x7f00000001c0))
setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000700)={@pptp={0x18, 0x2, {0x0, @local}}, {&(0x7f0000000500)=""/165, 0xa5}, &(0x7f0000000140), 0x42}, 0xa0) (async)
setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000700)={@pptp={0x18, 0x2, {0x0, @local}}, {&(0x7f0000000500)=""/165, 0xa5}, &(0x7f0000000140), 0x42}, 0xa0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d0c, 0x0, @fd_index=0xa, 0x0, 0x0, 0x1, 0x1})
io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0)

4m31.065995545s ago: executing program 34 (id=29375):
r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x4525, 0x0, 0x0, 0x12d}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000640)=<r2=>0x0)
syz_io_uring_setup(0x584d, &(0x7f0000000380)={0x0, 0x8aec, 0x10, 0x0, 0x101}, &(0x7f0000000240), &(0x7f0000000040)) (async)
r3 = syz_io_uring_setup(0x584d, &(0x7f0000000380)={0x0, 0x8aec, 0x10, 0x0, 0x101}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
mmap$IORING_OFF_CQ_RING(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r0, 0x8000000)
syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x880, 0x2, 0x0, 0x127, 0x0, 0x0, {0x2}})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r7 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x2, 0x39a}, &(0x7f00000002c0)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0x11, &(0x7f0000000100)=0x7f, 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r7, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) (async)
io_uring_enter(r7, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
io_uring_enter(r3, 0x6efc, 0x3900, 0xb, 0x0, 0x0)
r11 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
close(r11) (async)
close(r11)
io_uring_setup(0x24d, &(0x7f0000000180)={0x0, 0x6549, 0x20000, 0x0, 0x17b, 0x0, r3}) (async)
r12 = io_uring_setup(0x24d, &(0x7f0000000180)={0x0, 0x6549, 0x20000, 0x0, 0x17b, 0x0, r3})
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r12, 0x18, &(0x7f00000000c0)={0x2008000, r3, 0x12, {0x6, 0x1}, 0x5}, 0x1) (async)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r12, 0x18, &(0x7f00000000c0)={0x2008000, r3, 0x12, {0x6, 0x1}, 0x5}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r13 = syz_io_uring_setup(0x1881, &(0x7f0000000880)={0x0, 0x17e8, 0x200, 0x102, 0x3c2}, &(0x7f0000000580), &(0x7f0000000900))
io_uring_register$IORING_UNREGISTER_NAPI(r13, 0x1c, &(0x7f0000001980), 0x1)
socket$inet6(0xa, 0x80002, 0x0) (async)
socket$inet6(0xa, 0x80002, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x3, 0xfffffffe}, &(0x7f0000000180), &(0x7f00000001c0))
setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000700)={@pptp={0x18, 0x2, {0x0, @local}}, {&(0x7f0000000500)=""/165, 0xa5}, &(0x7f0000000140), 0x42}, 0xa0) (async)
setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000700)={@pptp={0x18, 0x2, {0x0, @local}}, {&(0x7f0000000500)=""/165, 0xa5}, &(0x7f0000000140), 0x42}, 0xa0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d0c, 0x0, @fd_index=0xa, 0x0, 0x0, 0x1, 0x1})
io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0)

3.27339336s ago: executing program 3 (id=31919):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x6734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x57de, 0x0, 0x0, 0x0, 0x0)

3.026092979s ago: executing program 3 (id=31920):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x6734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) (async)
r3 = socket(0x80000000000000a, 0x2, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async)
r4 = socket$isdn_base(0x22, 0x3, 0x0)
close(r4)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) (async)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000000)=0x1, 0x4) (async)
io_uring_enter(r0, 0x57de, 0x0, 0x0, 0x0, 0x0)

2.18980922s ago: executing program 5 (id=31923):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x28)
close(0x3)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400401, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x40187542, &(0x7f0000000100)={'ipvlan1\x00'})

1.968941599s ago: executing program 5 (id=31924):
socket(0x10, 0x803, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x241648c8f694d91a, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000088d82, 0x0)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000040)={0x0, 0x5cd0, 0x100, 0xfffffffc, 0x1bc}, &(0x7f0000002180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x1, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r4 = io_uring_setup(0x1f0b, &(0x7f0000000140)={0x0, 0x4d23, 0x1040, 0x2, 0x12b})
io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f0000000080)={0x1, 0x9}, 0x1)
io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f00000006c0)={&(0x7f0000004000)={[{0x0, 0x0, 0x2}]}, 0x1, 0x1}, 0x1)
syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x100, 0x4000})
r5 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xbe0d, 0x800, 0x0, 0x31e}, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000200)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000066e000/0x3000)=nil, 0x3000, 0x64})
io_uring_enter(r5, 0x4, 0xfcc0, 0x29, 0x0, 0x0)
io_uring_enter(r5, 0x6085, 0xa7ca, 0x0, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x64, 0x183100, 0x23456})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r8 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x10f843, 0x1e0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r9, 0x29, 0xcf, &(0x7f0000000000)=0x3, 0x4)
openat(r8, &(0x7f0000000040)='./file1\x00', 0x109080, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

1.682657779s ago: executing program 3 (id=31926):
r0 = syz_io_uring_setup(0x509, &(0x7f0000000140)={0x0, 0x114df, 0x10, 0x2, 0x89}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000440)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000380)='./cgroup\x00', 0x2, 0x298f82})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r4=>0x0})
r5 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x709b, 0x10100, 0x1}, &(0x7f0000000040), &(0x7f0000000140))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000080)={0x1, 0x9}, 0x1)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
r7 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0})
io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6, @multicast}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r11 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x10000, 0x1, 0x1}, &(0x7f0000000040)=<r12=>0x0, &(0x7f0000000000)=<r13=>0x0)
syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r11, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f)

1.318170269s ago: executing program 4 (id=31927):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = syz_io_uring_setup(0x12de, &(0x7f0000000200)={0x0, 0x2000, 0x10100, 0x0, 0x1}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0xbf6b}})
socket(0x10, 0x803, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, r0, 0x81af4000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f00000003c0)={0x4, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/135, 0x87}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/140, 0x8c}, {&(0x7f0000000140)=""/5, 0x5}], &(0x7f0000000380)=[0x4, 0x1ff, 0x0, 0x5, 0x3, 0xffffffffffffffe6, 0x2]}, 0x20)
io_uring_enter(r1, 0x5b43, 0xaced, 0x20, 0x0, 0x0)

1.313551723s ago: executing program 3 (id=31928):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080)=0xe2, 0x4)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x2, 0x39d}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4)
setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000040)=0x8, 0x4)
r5 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x40ead000)
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2)
close(r7)
setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000040)={0x100, 0x2169, 0x7fff, 0x4}, 0x8)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0xfffffffc, @remote, 0x9}], 0x1c)

759.141062ms ago: executing program 5 (id=31929):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0xffffffff, 0x62}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)
socket$alg(0x26, 0x5, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a8, 0x1, 0x7ffc, 0x8040024e}, 0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
socket$tipc(0x1e, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/122, 0x7a}, {0x0}], 0x2})
io_uring_enter(r0, 0x567, 0x2583, 0x0, 0x0, 0x0)

518.135703ms ago: executing program 4 (id=31930):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = io_uring_setup(0x4033, &(0x7f0000000100)={0x0, 0x1e89, 0x8, 0x1, 0x177})
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000840)={0x7, 0x0, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/56, 0x38}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000440)=""/201, 0xc9}, {&(0x7f0000000540)=""/130, 0x82}, {0xfffffffffffffffd}, {&(0x7f0000000600)=""/86, 0x56}, {&(0x7f0000000380)=""/26, 0x1a}, {&(0x7f0000000680)=""/250, 0xfa}], &(0x7f0000000800)=[0x9, 0x8001, 0xc, 0xcf36], 0x8}, 0x20)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000400)={@rand_addr=0x64010100, @multicast1, 0x1, 0x3, [@private=0xa010100, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1f}]}, 0x1c)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/192, 0xc0}], 0x1)
syz_io_uring_setup(0x5d0, &(0x7f0000000240)={0x0, 0x6734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r5)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x40000000, &(0x7f00000003c0)={'veth0_to_bridge\x00'})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x4, 0x0})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000009c0)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
r7 = syz_io_uring_setup(0x5b5, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000100))
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x1a, 0x20000028, r8)
r9 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0xfffffff8, 0x100}, &(0x7f00000007c0), &(0x7f0000000800))
io_uring_enter(r9, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r10 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r10, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0xfffffffb, @loopback, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0xfe}, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x0, 0xfffffef9, 0x0, 0x1, 0x8]}}, 0x5c)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r9, 0x12, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
setsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000000980)=0x100, 0x4)
socket$packet(0x11, 0x0, 0x300)
setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000a00)=0x1438, 0x4)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000040)=0x3, 0x4)

517.821298ms ago: executing program 4 (id=31931):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x1})
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x40186f40, &(0x7f0000000180)={'wg0\x00'})

418.131486ms ago: executing program 4 (id=31932):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x406, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x80, 0x0, 0x0, 0x3fd}, {0x6}]}, 0x10)
close(r0)
socket$netlink(0x10, 0x3, 0x10)
clock_gettime(0x4c25726cb16dd79b, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8968, &(0x7f00000003c0)={'veth0_to_bridge\x00'})
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0xa, "c3aea9b77756ffde54cb11a94b035d6bfc309544e4cdb728cd023a7ae0defd8c", 0x8, 0x5000, 0x1, 0x1}, 0x3c)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x20040, 0x4)
socket$unix(0x1, 0x2, 0x0)

417.781228ms ago: executing program 4 (id=31933):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x538, 0x4)
syz_io_uring_setup(0x2d2, &(0x7f0000000500)={0x0, 0xdff9, 0x10000, 0x3, 0xfffffffc}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4e3b947d338dce40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3ff}, @in6={0xa, 0x4e23, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x400}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x48)

228.652575ms ago: executing program 5 (id=31934):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r1=>0x0})
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x230401, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000080)='freezer.state\x00', 0x0, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10)
close(r0)
socket$nl_xfrm(0x10, 0x3, 0x6)

123.727635ms ago: executing program 3 (id=31935):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = io_uring_setup(0x37b0, &(0x7f00000003c0)={0x0, 0xc028, 0x400, 0x2, 0x400022a})
io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, 0x0, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000200)}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0)
socket$tipc(0x1e, 0x5, 0x0)

14.292483ms ago: executing program 5 (id=31936):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x882, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={r2, @local, @multicast2}, 0xc)
openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
socket(0x40000000015, 0x5, 0x0)
socket(0x15, 0x5, 0x0)
syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xd762, 0x100, 0x0, 0x134}, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(0xffffffffffffffff, 0x8184c, 0x0, 0x9, 0x0, 0x0)

2.949972ms ago: executing program 3 (id=31937):
r0 = syz_io_uring_setup(0x49f, &(0x7f0000000380)={0x0, 0xd6dc, 0x4, 0x7ffe, 0x4040024d}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000100)=0x3, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2161, 0x1, {0x2}})
io_uring_enter(r0, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x41)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x80, 0x900, 0x12345})
syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe16, 0x10, 0x0, 0x30f}, &(0x7f0000000440)=<r3=>0x0, &(0x7f0000000540))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
socket(0x28, 0x5, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1)
setsockopt$inet6_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x4, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
setsockopt$sock_int(r5, 0x1, 0x20, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x800, 0x1, 0x40000333}, &(0x7f00000006c0)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r7, 0x847ba, 0x44b1, 0x2a99d16ef8dff347, 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000b)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4)

549.558µs ago: executing program 4 (id=31938):
r0 = socket(0x2, 0xa, 0x300)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@pptp={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, {&(0x7f0000000040)=""/162, 0xa2}, &(0x7f0000000100)}, 0xa0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'pim6reg0\x00', <r2=>0x0})
setsockopt$inet_mreqn(r1, 0x0, 0xf87766fa377872b4, &(0x7f0000000240)={@remote, @private=0xa010101, r2}, 0xc)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xfffffffd, @local, 0x5}], 0x1c)

0s ago: executing program 5 (id=31939):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x6738, 0x80, 0x40000, 0x80034f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r0, 0x57de, 0x0, 0x0, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
r4 = syz_io_uring_setup(0xf4d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x6738, 0x80, 0x40000, 0x80034f}, &(0x7f00000000c0), &(0x7f00000001c0)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) (async)
io_uring_enter(r0, 0x57de, 0x0, 0x0, 0x0, 0x0) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) (async)
syz_io_uring_setup(0xf4d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080)) (async)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) (async)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) (async)

kernel console output (not intermixed with test programs):

22567] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20000
[  813.586529][T22567] binder: binder_mmap: 22566 200000000000-200000b36000 bad vm_flags failed -1
[  819.324704][T23204] syzkaller0: entered allmulticast mode
[  819.327156][T23204] syzkaller0: entered promiscuous mode
[  819.340312][T23204] syzkaller0 (unregistering): left allmulticast mode
[  819.346724][T23204] syzkaller0 (unregistering): left promiscuous mode
[  823.824112][T23327] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  826.632402][T23365] ptm ptm3: ldisc open failed (-12), clearing slot 3
[  826.638115][T23365] ptm ptm3: ldisc open failed (-12), clearing slot 3
[  826.681599][T23365] ptm ptm3: ldisc open failed (-12), clearing slot 3
[  826.707653][T23365] ptm ptm3: ldisc open failed (-12), clearing slot 3
[  826.718263][T23365] ptm ptm3: ldisc open failed (-12), clearing slot 3
[  826.731954][T23365] ptm ptm3: ldisc open failed (-12), clearing slot 3
[  829.091853][T23439] dvmrp5: entered allmulticast mode
[  829.894273][T23470] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  829.898088][T23470] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  829.910402][T23470] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  830.421703][T23487] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  831.655559][T23515] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  832.757910][T23553] pim6reg: left allmulticast mode
[  832.852065][   T33] audit: type=1800 audit(1758316405.906:7): pid=23562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.22458" name="file1" dev="tmpfs" ino=37835 res=0 errno=0
[  833.293344][T23588] binder: 23587:23588 ioctl 8933 200000000100 returned -22
[  833.704244][   T33] audit: type=1800 audit(1758316406.756:8): pid=23604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.22473" name="file1" dev="tmpfs" ino=38446 res=0 errno=0
[  838.819901][   T33] audit: type=1800 audit(1758316411.866:9): pid=23782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.22539" name="file1" dev="tmpfs" ino=37959 res=0 errno=0
[  841.831723][T23849] dvmrp0: entered allmulticast mode
[  841.843812][T23848] dvmrp0: left allmulticast mode
[  842.821263][T23871] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001
[  843.888750][T23905] IPVS: set_ctl: invalid protocol: 103 172.20.20.21:20004
[  844.045259][   T33] audit: type=1800 audit(1758316417.096:10): pid=23919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.22583" name="file1" dev="tmpfs" ino=38032 res=0 errno=0
[  847.726906][T24006] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001
[  848.548184][T24030] IPVS: Scheduler module ip_vs_ not found
[  849.378674][T24058] delete_channel: no stack
[  854.708357][T24193] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001
[  858.104138][T24248] pimreg: entered allmulticast mode
[  858.452550][T24255] dvmrp1: entered allmulticast mode
[  859.049056][T24273] delete_channel: no stack
[  862.243320][T24335] bridge0: entered allmulticast mode
[  862.257065][T24335] pim6reg: entered allmulticast mode
[  862.276366][T24335] pim6reg: left allmulticast mode
[  862.278609][T24335] bridge0: left allmulticast mode
[  866.881092][T24407] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20000
[  870.055946][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  870.058628][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  870.167832][T24465] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001
[  871.100307][T24483] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  871.106481][T24483] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  871.114003][T24483] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  871.118361][T24483] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  871.125872][T24483] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  871.485903][T24480] chnl_net:caif_netlink_parms(): no params data found
[  871.693449][T24480] bridge0: port 1(bridge_slave_0) entered blocking state
[  871.696594][T24480] bridge0: port 1(bridge_slave_0) entered disabled state
[  871.699679][T24480] bridge_slave_0: entered allmulticast mode
[  871.703891][T24480] bridge_slave_0: entered promiscuous mode
[  871.709110][T24480] bridge0: port 2(bridge_slave_1) entered blocking state
[  871.712624][T24480] bridge0: port 2(bridge_slave_1) entered disabled state
[  871.715674][T24480] bridge_slave_1: entered allmulticast mode
[  871.721406][T24480] bridge_slave_1: entered promiscuous mode
[  871.803821][T24480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  871.811856][T24480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  871.873539][T24480] team0: Port device team_slave_0 added
[  871.879124][T24480] team0: Port device team_slave_1 added
[  871.955534][T24480] batman_adv: batadv0: Adding interface: batadv_slave_0
[  871.958448][T24480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  871.975541][T24480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  871.994220][T24480] batman_adv: batadv0: Adding interface: batadv_slave_1
[  871.997164][T24480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  872.021744][T24480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  872.109766][T24507] random: crng reseeded on system resumption
[  872.147691][T24480] hsr_slave_0: entered promiscuous mode
[  872.162718][T24480] hsr_slave_1: entered promiscuous mode
[  872.165756][T24480] debugfs: 'hsr0' already exists in 'hsr'
[  872.168246][T24480] Cannot create hsr debugfs directory
[  873.184326][T24483] Bluetooth: hci3: command tx timeout
[  873.195375][T24480] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  873.224856][T24480] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  873.243561][T24480] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  873.279583][T24480] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  873.545737][T24480] 8021q: adding VLAN 0 to HW filter on device bond0
[  873.582788][T24480] 8021q: adding VLAN 0 to HW filter on device team0
[  873.593667][T21209] bridge0: port 1(bridge_slave_0) entered blocking state
[  873.597127][T21209] bridge0: port 1(bridge_slave_0) entered forwarding state
[  873.617086][T21209] bridge0: port 2(bridge_slave_1) entered blocking state
[  873.620034][T21209] bridge0: port 2(bridge_slave_1) entered forwarding state
[  873.934605][T24480] 8021q: adding VLAN 0 to HW filter on device batadv0
[  874.038986][T24480] veth0_vlan: entered promiscuous mode
[  874.054263][T24480] veth1_vlan: entered promiscuous mode
[  874.122571][T24480] veth0_macvtap: entered promiscuous mode
[  874.138243][T24480] veth1_macvtap: entered promiscuous mode
[  874.191277][T24480] batman_adv: batadv0: Interface activated: batadv_slave_0
[  874.205567][T24480] batman_adv: batadv0: Interface activated: batadv_slave_1
[  874.235533][T24521] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  874.240476][T24521] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  874.244299][T24521] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  874.248075][T24521] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  874.513173][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  874.548411][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  874.634130][T20144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  874.638765][T20144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  874.676759][T24541] vlan0: entered promiscuous mode
[  874.683264][T24540] vlan0: left promiscuous mode
[  875.250322][T24483] Bluetooth: hci3: command tx timeout
[  876.901543][T24579] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  877.335970][T24483] Bluetooth: hci3: command tx timeout
[  877.688462][T24599] hsr0: entered promiscuous mode
[  877.838211][T24602] hsr0: left promiscuous mode
[  879.421616][T24483] Bluetooth: hci3: command tx timeout
[  885.185352][T24711] hsr0: entered promiscuous mode
[  885.290892][T24714] hsr0: left promiscuous mode
[  888.145087][ T1619] IPVS: starting estimator thread 0...
[  888.243715][T24758] IPVS: using max 45 ests per chain, 108000 per kthread
[  888.490619][T24764] bridge0: entered allmulticast mode
[  888.507528][T24764] pim6reg: entered allmulticast mode
[  888.524529][T24764] pim6reg: left allmulticast mode
[  888.527510][T24764] bridge0: left allmulticast mode
[  889.315285][T24783] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001
[  890.262353][ T5895] syz-executor (5895) used greatest stack depth: 18888 bytes left
[  890.293615][ T5880] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  890.515582][ T5880] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  890.633899][ T5880] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  890.915533][ T5880] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  891.264607][ T5880] bridge_slave_1: left allmulticast mode
[  891.267591][ T5880] bridge_slave_1: left promiscuous mode
[  891.277599][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[  891.296626][ T5880] bridge_slave_0: left allmulticast mode
[  891.299564][ T5880] bridge_slave_0: left promiscuous mode
[  891.315724][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[  891.709537][ T5880] dvmrp5 (unregistering): left allmulticast mode
[  891.983859][ T5880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  891.991701][ T5880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  891.999468][ T5880] bond0 (unregistering): Released all slaves
[  892.011561][T24827] IPVS: Unknown mcast interface: N!
[  892.519958][T24869] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  893.300793][ T5880] hsr_slave_0: left promiscuous mode
[  893.317373][ T5880] hsr_slave_1: left promiscuous mode
[  893.321417][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  893.356873][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_0
[  893.412370][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  893.441739][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_1
[  893.509490][ T5880] veth1_macvtap: left promiscuous mode
[  893.524177][ T5880] veth0_macvtap: left promiscuous mode
[  893.526205][ T5880] veth1_vlan: left promiscuous mode
[  893.547567][ T5880] veth0_vlan: left promiscuous mode
[  893.878904][ T5880] pim6reg (unregistering): left allmulticast mode
[  895.073962][ T5880] team0 (unregistering): Port device team_slave_1 removed
[  895.183950][ T5880] team0 (unregistering): Port device team_slave_0 removed
[  896.181649][T24933] hsr0: entered promiscuous mode
[  896.184300][T24933] hsr0: left promiscuous mode
[  896.502865][ T5880] IPVS: stop unused estimator thread 0...
[  897.524060][T24956] dummy0: entered allmulticast mode
[  897.540896][T24956] dummy0: left allmulticast mode
[  901.644731][T25051] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  901.715824][   T33] audit: type=1800 audit(1758316474.766:11): pid=25041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.22951" name=84 dev="tmpfs" ino=298 res=0 errno=0
[  901.807067][T25058] hsr0: entered promiscuous mode
[  901.810192][T25058] hsr0: left promiscuous mode
[  905.886375][T25132] hsr0: entered promiscuous mode
[  905.889331][T25132] hsr0: left promiscuous mode
[  906.099177][T25139] IPVS: Scheduler module ip_vs_ not found
[  907.000536][T25159] IPVS: Unknown mcast interface: N!
[  907.121650][T25161] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20002
[  907.470471][T25169] delete_channel: no stack
[  917.584839][   T33] audit: type=1800 audit(1758316490.636:12): pid=25381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.23058" name="file1" dev="tmpfs" ino=39554 res=0 errno=0
[  919.658710][T25433] dvmrp5: entered allmulticast mode
[  920.173092][T25447] dvmrp1: left allmulticast mode
[  920.461983][T25453] IPVS: Unknown mcast interface: pimreg1
[  920.567029][T25456] veth0: entered promiscuous mode
[  920.586744][T25454] veth0: left promiscuous mode
[  921.016275][T25477] delete_channel: no stack
[  923.077269][T25526] IPVS: set_ctl: invalid protocol: 0 172.20.20.31:20000
[  924.781542][T25574] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  924.882713][T25573] can: request_module (can-proto-3) failed.
[  926.465313][T25622] dvmrp5: entered allmulticast mode
[  928.164565][   T33] audit: type=1800 audit(1758316501.216:13): pid=25641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.23153" name="file1" dev="tmpfs" ino=39790 res=0 errno=0
[  928.401781][T25649] pimreg3: entered allmulticast mode
[  928.737032][T25655] IPVS: Unknown mcast interface: N!t
[  931.495204][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  931.498031][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  939.925279][T26762] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  950.453101][T28330] dvmrp5: left allmulticast mode
[  952.732134][T28399] vlan0: entered promiscuous mode
[  952.747824][T28398] vlan0: left promiscuous mode
[  955.768352][T28457] IPVS: set_ctl: invalid protocol: 2 8.0.0.0:768
[  956.222741][T28475] pimreg3: entered allmulticast mode
[  958.171619][T28509] veth0: entered promiscuous mode
[  958.184606][T28507] veth0: left promiscuous mode
[  958.487836][T28526] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:65535
[  958.726709][T28530] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20004
[  963.214963][T28646] dummy0: entered allmulticast mode
[  963.221268][T28646] dummy0: left allmulticast mode
[  966.051530][T28722] syz.1.23520: vmalloc error: size 134221824, failed to allocated page array size 262152, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  966.059178][T28722] CPU: 0 UID: 0 PID: 28722 Comm: syz.1.23520 Not tainted syzkaller #0 PREEMPT(full) 
[  966.059199][T28722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  966.059209][T28722] Call Trace:
[  966.059217][T28722]  <TASK>
[  966.059226][T28722]  dump_stack_lvl+0x189/0x250
[  966.059256][T28722]  ? __pfx_dump_stack_lvl+0x10/0x10
[  966.059274][T28722]  ? __pfx__printk+0x10/0x10
[  966.059295][T28722]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  966.059313][T28722]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  966.059329][T28722]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  966.059347][T28722]  warn_alloc+0x214/0x310
[  966.059367][T28722]  ? __pfx_warn_alloc+0x10/0x10
[  966.059389][T28722]  ? __get_vm_area_node+0x28f/0x300
[  966.059411][T28722]  ? xskq_create+0xbf/0x170
[  966.059437][T28722]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  966.059482][T28722]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  966.059506][T28722]  ? __kasan_kmalloc+0x93/0xb0
[  966.059525][T28722]  vmalloc_user_noprof+0xad/0xf0
[  966.059546][T28722]  ? xskq_create+0xbf/0x170
[  966.059567][T28722]  xskq_create+0xbf/0x170
[  966.059589][T28722]  xsk_init_queue+0xb0/0x110
[  966.059611][T28722]  xsk_setsockopt+0x4dc/0x8d0
[  966.059633][T28722]  ? __pfx_xsk_setsockopt+0x10/0x10
[  966.059654][T28722]  ? __pfx_aa_sk_perm+0x10/0x10
[  966.059676][T28722]  ? aa_sock_opt_perm+0xff/0x1b0
[  966.059701][T28722]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  966.059717][T28722]  ? __pfx_xsk_setsockopt+0x10/0x10
[  966.059737][T28722]  do_sock_setsockopt+0x17c/0x1b0
[  966.059760][T28722]  __x64_sys_setsockopt+0x13f/0x1b0
[  966.059802][T28722]  do_syscall_64+0xfa/0xfa0
[  966.059818][T28722]  ? lockdep_hardirqs_on+0x9c/0x150
[  966.059831][T28722]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  966.059874][T28722]  ? exc_page_fault+0xab/0x100
[  966.059889][T28722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  966.059903][T28722] RIP: 0033:0x7f618398eba9
[  966.059926][T28722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  966.059938][T28722] RSP: 002b:00007f6184890038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  966.059954][T28722] RAX: ffffffffffffffda RBX: 00007f6183bd6180 RCX: 00007f618398eba9
[  966.059964][T28722] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  966.059973][T28722] RBP: 00007f6183a11e19 R08: 0000000000000004 R09: 0000000000000000
[  966.059981][T28722] R10: 0000200000000640 R11: 0000000000000246 R12: 0000000000000000
[  966.059990][T28722] R13: 00007f6183bd6218 R14: 00007f6183bd6180 R15: 00007ffc092e1788
[  966.060015][T28722]  </TASK>
[  966.253898][T28722] Mem-Info:
[  966.260803][T28722] active_anon:8472 inactive_anon:4 isolated_anon:0
[  966.260803][T28722]  active_file:1977 inactive_file:38610 isolated_file:0
[  966.260803][T28722]  unevictable:1768 dirty:309 writeback:0
[  966.260803][T28722]  slab_reclaimable:10114 slab_unreclaimable:53278
[  966.260803][T28722]  mapped:19193 shmem:2414 pagetables:1044
[  966.260803][T28722]  sec_pagetables:0 bounce:0
[  966.260803][T28722]  kernel_misc_reclaimable:0
[  966.260803][T28722]  free:288326 free_pcp:19700 free_cma:0
[  966.281944][T28722] Node 0 active_anon:25168kB inactive_anon:4kB active_file:5228kB inactive_file:136080kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38656kB dirty:648kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB kernel_stack:6332kB pagetables:2044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  966.296716][T28722] Node 1 active_anon:8720kB inactive_anon:12kB active_file:2680kB inactive_file:18360kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38116kB dirty:588kB writeback:0kB shmem:10888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6244kB pagetables:2132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  966.310501][T28722] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  966.350453][T28722] lowmem_reserve[]: 0 810 810 810 810
[  966.353418][T28722] Node 0 DMA32 free:267276kB boost:0kB min:33600kB low:42000kB high:50400kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17528kB inactive_anon:4kB active_file:5228kB inactive_file:136080kB unevictable:3536kB writepending:648kB zspages:0kB present:1556484kB managed:830068kB mlocked:0kB bounce:0kB free_pcp:43348kB local_pcp:29228kB free_cma:0kB
[  966.378359][T28722] lowmem_reserve[]: 0 0 0 0 0
[  966.381018][T28722] Node 1 DMA32 free:458492kB boost:0kB min:19212kB low:24012kB high:28812kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  966.409130][T28722] lowmem_reserve[]: 0 0 854 854 854
[  966.415703][T28722] Node 1 Normal free:421092kB boost:0kB min:36652kB low:45812kB high:54972kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8720kB inactive_anon:12kB active_file:2680kB inactive_file:18360kB unevictable:3536kB writepending:588kB zspages:0kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:34896kB local_pcp:20572kB free_cma:0kB
[  966.431139][T28722] lowmem_reserve[]: 0 0 0 0 0
[  966.433350][T28722] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  966.439729][T28722] Node 0 DMA32: 552*4kB (UME) 112*8kB (UME) 143*16kB (ME) 179*32kB (UME) 258*64kB (UME) 104*128kB (UME) 86*256kB (UM) 59*512kB (UME) 32*1024kB (UME) 7*2048kB (UME) 31*4096kB (UM) = 267248kB
[  966.553433][T28722] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  966.563650][T28722] Node 1 Normal: 759*4kB (UME) 1069*8kB (UME) 472*16kB (UME) 329*32kB (UME) 120*64kB (UME) 112*128kB (UM) 43*256kB (UME) 39*512kB (UM) 12*1024kB (UM) 6*2048kB (UM) 77*4096kB (UM) = 422628kB
[  966.575993][T28722] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  966.581201][T28722] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  966.586336][T28722] 43030 total pagecache pages
[  966.588475][T28722] 0 pages in swap cache
[  966.590676][T28722] Free swap  = 124996kB
[  966.593011][T28722] Total swap = 124996kB
[  966.610049][T28722] 786301 pages RAM
[  966.611996][T28722] 0 pages HighMem/MovableOnly
[  966.614025][T28722] 241552 pages reserved
[  966.615735][T28722] 0 pages cma reserved
[  966.674155][T28740] pim6reg9: entered allmulticast mode
[  969.484062][T28804] IPVS: Unknown mcast interface: N!
[  972.795927][T28888] delete_channel: no stack
[  975.268073][T28966] veth0: entered promiscuous mode
[  975.747611][T28965] veth0: left promiscuous mode
[  975.957434][T28987] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20002
[  977.209226][T29028] pim6reg: entered allmulticast mode
[  977.512926][T29027] pim6reg: left allmulticast mode
[  978.180387][T29030] veth0: entered promiscuous mode
[  978.215438][T29029] veth0: left promiscuous mode
[  982.332995][T29153] binder: 29152:29153 ioctl 400c620e 200000000100 returned -22
[  982.731719][T29165] IPVS: Scheduler module ip_vs_ not found
[  983.349656][T29187] GUP no longer grows the stack in syz.3.23676 (29187): 200000003000-20000000a000 (200000001000)
[  983.371362][T29187] CPU: 0 UID: 0 PID: 29187 Comm: syz.3.23676 Not tainted syzkaller #0 PREEMPT(full) 
[  983.371386][T29187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  983.371401][T29187] Call Trace:
[  983.371407][T29187]  <TASK>
[  983.371416][T29187]  dump_stack_lvl+0x189/0x250
[  983.371444][T29187]  ? __pfx_dump_stack_lvl+0x10/0x10
[  983.371463][T29187]  ? __pfx__printk+0x10/0x10
[  983.371482][T29187]  ? find_vma+0xe7/0x160
[  983.371515][T29187]  __get_user_pages+0x2470/0x2a00
[  983.371558][T29187]  ? __gup_longterm_locked+0x307/0x1660
[  983.371578][T29187]  ? down_read_killable+0x1d1/0x350
[  983.371601][T29187]  __gup_longterm_locked+0x3dc/0x1660
[  983.371637][T29187]  ? gup_fast_fallback+0x1b86/0x22d0
[  983.371660][T29187]  gup_fast_fallback+0x1d65/0x22d0
[  983.371742][T29187]  ? __pfx_gup_fast_fallback+0x10/0x10
[  983.371765][T29187]  ? rcu_is_watching+0x15/0xb0
[  983.371795][T29187]  ? __kvmalloc_node_noprof+0x5ed/0x910
[  983.371810][T29187]  ? is_valid_gup_args+0x11f/0x200
[  983.371832][T29187]  ? pin_user_pages_fast+0x4d/0xb0
[  983.371855][T29187]  io_pin_pages+0xba/0x1b0
[  983.371872][T29187]  io_sqe_buffer_register+0x16f/0x20a0
[  983.371908][T29187]  ? __pfx_io_sqe_buffer_register+0x10/0x10
[  983.371928][T29187]  ? trace_kmalloc+0x1f/0xd0
[  983.371947][T29187]  ? __kvmalloc_node_noprof+0x5ed/0x910
[  983.371962][T29187]  ? io_sqe_buffers_register+0x138/0x8e0
[  983.371978][T29187]  ? iovec_from_user+0x1ba/0x250
[  983.371998][T29187]  io_sqe_buffers_register+0x3b9/0x8e0
[  983.372027][T29187]  ? __pfx_io_sqe_buffers_register+0x10/0x10
[  983.372044][T29187]  ? __fget_files+0x3a0/0x420
[  983.372071][T29187]  ? __fget_files+0x2a/0x420
[  983.372089][T29187]  ? io_is_uring_fops+0xd/0x50
[  983.372110][T29187]  __se_sys_io_uring_register+0xac3/0x1220
[  983.372134][T29187]  ? __se_sys_futex+0x36f/0x400
[  983.372156][T29187]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[  983.372181][T29187]  ? __pfx___se_sys_futex+0x10/0x10
[  983.372223][T29187]  ? do_syscall_64+0xbe/0xfa0
[  983.372242][T29187]  do_syscall_64+0xfa/0xfa0
[  983.372256][T29187]  ? lockdep_hardirqs_on+0x9c/0x150
[  983.372271][T29187]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  983.372287][T29187]  ? exc_page_fault+0xab/0x100
[  983.372304][T29187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  983.372319][T29187] RIP: 0033:0x7fa2eef8eba9
[  983.372335][T29187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  983.372349][T29187] RSP: 002b:00007fa2efd67038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  983.372368][T29187] RAX: ffffffffffffffda RBX: 00007fa2ef1d5fa0 RCX: 00007fa2eef8eba9
[  983.372379][T29187] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000009
[  983.372389][T29187] RBP: 00007fa2ef011e19 R08: 0000000000000000 R09: 0000000000000000
[  983.372399][T29187] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000000
[  983.372410][T29187] R13: 00007fa2ef1d6038 R14: 00007fa2ef1d5fa0 R15: 00007ffdbba82b58
[  983.372438][T29187]  </TASK>
[  984.616277][T29213] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  986.721995][T29266] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  986.725665][T29266] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  986.728678][T29266] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  986.733083][T29266] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  986.739361][T29266] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  986.750571][T29267] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  988.050998][T24483] Bluetooth: hci1: command 0x0c1a tx timeout
[  988.091036][T29366] bridge0: entered allmulticast mode
[  988.105890][T29367] pim6reg: entered allmulticast mode
[  988.115411][T29371] bond_slave_0: entered promiscuous mode
[  988.184023][T29368] bond_slave_0: left promiscuous mode
[  988.770143][T24483] Bluetooth: hci3: command 0x0c1a tx timeout
[  988.772648][T24483] Bluetooth: hci2: command 0x0c1a tx timeout
[  990.850506][T24483] Bluetooth: hci3: command 0x0c1a tx timeout
[  992.206679][   T33] audit: type=1800 audit(1758316565.256:14): pid=29514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.23786" name="file1" dev="tmpfs" ino=40917 res=0 errno=0
[  992.935634][T24483] Bluetooth: hci3: command 0x0c1a tx timeout
[  992.940173][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  992.943104][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  994.578750][T29598] dvmrp5: entered allmulticast mode
[  994.587092][T29598] IPVS: set_ctl: invalid protocol: 92 172.30.1.2:20002
[  994.855304][T29609] pim6reg: entered allmulticast mode
[  995.048909][T29608] pim6reg: left allmulticast mode
[  997.435067][T29709] veth0: entered promiscuous mode
[  997.480838][T29708] veth0: left promiscuous mode
[ 1000.853402][T30415] vlan0: entered promiscuous mode
[ 1001.365447][T23377] vlan0: left promiscuous mode
[ 1005.923734][T30524] dvmrp5: entered allmulticast mode
[ 1005.945735][T30524] pimreg: entered allmulticast mode
[ 1005.960782][T30524] pimreg: left allmulticast mode
[ 1005.967062][T30524] dvmrp5: left allmulticast mode
[ 1006.366851][T30536] veth0: entered promiscuous mode
[ 1006.401565][T30533] veth0: left promiscuous mode
[ 1007.781903][T30574] dlm: non-version read from control device 4
[ 1007.871828][T30578] pimreg: entered allmulticast mode
[ 1007.882485][T30578] pimreg: left allmulticast mode
[ 1007.884725][T30578] dvmrp5: left allmulticast mode
[ 1008.558759][T30609] veth0: entered promiscuous mode
[ 1008.590228][T30604] veth0: left promiscuous mode
[ 1008.642081][T30612] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1008.645160][T30612] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1008.649470][T30612] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1009.221689][T30633] veth0: entered promiscuous mode
[ 1009.229465][T30632] veth0: left promiscuous mode
[ 1009.271655][T30640] syz_tun: entered allmulticast mode
[ 1012.993146][T30790] syz_tun: entered allmulticast mode
[ 1013.036673][T30787] dvmrp8: entered allmulticast mode
[ 1013.096496][T30787] syz_tun: left allmulticast mode
[ 1013.098573][T30787] dvmrp8: left allmulticast mode
[ 1013.355040][T30798] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[ 1014.050133][T30818] delete_channel: no stack
[ 1014.389575][T30811] pim6reg: left allmulticast mode
[ 1014.399095][T30811] bridge0: left allmulticast mode
[ 1015.258432][T30858] pimreg: left allmulticast mode
[ 1015.261918][T30858] dvmrp5: left allmulticast mode
[ 1015.310735][T30850] bond_slave_0: entered promiscuous mode
[ 1015.411284][T30849] bond_slave_0: left promiscuous mode
[ 1016.361230][T30898] IPVS: set_ctl: invalid protocol: 65535 255.255.255.255:0
[ 1016.364981][T30899] IPVS: set_ctl: invalid protocol: 2 172.30.1.4:0
[ 1016.368158][T30898] IPVS: set_ctl: invalid protocol: 2 172.30.1.4:0
[ 1022.285416][T31061] binder_alloc: binder_alloc_mmap_handler: 31058 200000ffd000-200001000000 already mapped failed -16
[ 1030.829611][T31254] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0
[ 1030.829640][T31252] IPVS: stopping backup sync thread 31254 ...
[ 1031.558211][T31282] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1033.357596][T31321] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[ 1034.378975][T31349] veth0: entered promiscuous mode
[ 1034.385147][T31349] veth0: left promiscuous mode
[ 1035.984089][T31403] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20002
[ 1035.986935][T31402] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20002
[ 1036.161056][   T33] audit: type=1800 audit(1758316609.206:15): pid=31414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.24221" name="file1" dev="tmpfs" ino=41646 res=0 errno=0
[ 1037.989874][   T33] audit: type=1800 audit(1758316611.036:16): pid=31471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.24242" name="file1" dev="tmpfs" ino=2436 res=0 errno=0
[ 1038.403753][   T33] audit: type=1800 audit(1758316611.456:17): pid=31486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.24249" name="file0" dev="tmpfs" ino=41708 res=0 errno=0
[ 1038.976330][T31498] dvmrp1: entered allmulticast mode
[ 1043.137873][ T1175] delete_channel: no stack
[ 1047.563979][ T1343] can: request_module (can-proto-5) failed.
[ 1054.374946][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.377582][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[ 1056.213149][ T1571] syz.1.24424: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1056.220553][ T1571] CPU: 0 UID: 0 PID: 1571 Comm: syz.1.24424 Not tainted syzkaller #0 PREEMPT(full) 
[ 1056.220572][ T1571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1056.220581][ T1571] Call Trace:
[ 1056.220588][ T1571]  <TASK>
[ 1056.220594][ T1571]  dump_stack_lvl+0x189/0x250
[ 1056.220621][ T1571]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1056.220638][ T1571]  ? __pfx__printk+0x10/0x10
[ 1056.220657][ T1571]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1056.220673][ T1571]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1056.220687][ T1571]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[ 1056.220704][ T1571]  warn_alloc+0x214/0x310
[ 1056.220723][ T1571]  ? __pfx_warn_alloc+0x10/0x10
[ 1056.220743][ T1571]  ? __get_vm_area_node+0x28f/0x300
[ 1056.220764][ T1571]  ? packet_set_ring+0x6f3/0x2120
[ 1056.220788][ T1571]  __vmalloc_node_range_noprof+0x67e/0x12f0
[ 1056.220832][ T1571]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1056.220853][ T1571]  ? alloc_pages_mpol+0x3cd/0x4a0
[ 1056.220870][ T1571]  ? packet_set_ring+0x6f3/0x2120
[ 1056.220917][ T1571]  vzalloc_noprof+0xb2/0xf0
[ 1056.220944][ T1571]  ? packet_set_ring+0x6f3/0x2120
[ 1056.220964][ T1571]  packet_set_ring+0x6f3/0x2120
[ 1056.221001][ T1571]  ? __pfx_packet_set_ring+0x10/0x10
[ 1056.221036][ T1571]  ? _copy_from_user+0x94/0xb0
[ 1056.221059][ T1571]  packet_setsockopt+0xc5a/0x12c0
[ 1056.221081][ T1571]  ? __pfx_packet_setsockopt+0x10/0x10
[ 1056.221101][ T1571]  ? __mutex_unlock_slowpath+0x1a1/0x740
[ 1056.221130][ T1571]  ? aa_sk_perm+0x81e/0x950
[ 1056.221152][ T1571]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1056.221169][ T1571]  ? aa_sock_opt_perm+0xff/0x1b0
[ 1056.221190][ T1571]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1056.221205][ T1571]  ? __pfx_packet_setsockopt+0x10/0x10
[ 1056.221225][ T1571]  do_sock_setsockopt+0x17c/0x1b0
[ 1056.221246][ T1571]  __x64_sys_setsockopt+0x13f/0x1b0
[ 1056.221266][ T1571]  do_syscall_64+0xfa/0xfa0
[ 1056.221279][ T1571]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1056.221292][ T1571]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1056.221305][ T1571]  ? exc_page_fault+0xab/0x100
[ 1056.221320][ T1571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1056.221352][ T1571] RIP: 0033:0x7f618398eba9
[ 1056.221368][ T1571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1056.221379][ T1571] RSP: 002b:00007f618487e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1056.221395][ T1571] RAX: ffffffffffffffda RBX: 00007f6183bd6090 RCX: 00007f618398eba9
[ 1056.221405][ T1571] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000004
[ 1056.221426][ T1571] RBP: 00007f6183a11e19 R08: 000000000000001c R09: 0000000000000000
[ 1056.221435][ T1571] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[ 1056.221444][ T1571] R13: 00007f6183bd6128 R14: 00007f6183bd6090 R15: 00007ffc092e1788
[ 1056.221468][ T1571]  </TASK>
[ 1056.221575][ T1571] Mem-Info:
[ 1056.360535][ T1571] active_anon:6547 inactive_anon:0 isolated_anon:0
[ 1056.360535][ T1571]  active_file:1977 inactive_file:38649 isolated_file:0
[ 1056.360535][ T1571]  unevictable:1768 dirty:154 writeback:0
[ 1056.360535][ T1571]  slab_reclaimable:10120 slab_unreclaimable:53873
[ 1056.360535][ T1571]  mapped:20790 shmem:3421 pagetables:1062
[ 1056.360535][ T1571]  sec_pagetables:0 bounce:0
[ 1056.360535][ T1571]  kernel_misc_reclaimable:0
[ 1056.360535][ T1571]  free:291574 free_pcp:19301 free_cma:0
[ 1056.386350][ T1571] Node 0 active_anon:16076kB inactive_anon:0kB active_file:5164kB inactive_file:136128kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45320kB dirty:432kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6352kB pagetables:1880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1056.400074][ T1571] Node 1 active_anon:11948kB inactive_anon:0kB active_file:2744kB inactive_file:18468kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39608kB dirty:184kB writeback:0kB shmem:17612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6620kB pagetables:2300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1056.413694][ T1571] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1056.427546][ T1571] lowmem_reserve[]: 0 810 810 810 810
[ 1056.430408][ T1571] Node 0 DMA32 free:285176kB boost:0kB min:33600kB low:42000kB high:50400kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19204kB inactive_anon:0kB active_file:5164kB inactive_file:136128kB unevictable:3536kB writepending:432kB zspages:0kB present:1556484kB managed:830068kB mlocked:0kB bounce:0kB free_pcp:32968kB local_pcp:18276kB free_cma:0kB
[ 1056.444785][ T1571] lowmem_reserve[]: 0 0 0 0 0
[ 1056.448107][ T1571] Node 1 DMA32 free:458492kB boost:0kB min:19212kB low:24012kB high:28812kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[ 1056.466663][ T1571] lowmem_reserve[]: 0 0 854 854 854
[ 1056.474328][ T1571] Node 1 Normal free:403256kB boost:0kB min:36652kB low:45812kB high:54972kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11948kB inactive_anon:0kB active_file:2744kB inactive_file:18468kB unevictable:3536kB writepending:184kB zspages:0kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:47372kB local_pcp:31340kB free_cma:0kB
[ 1056.488711][ T1571] lowmem_reserve[]: 0 0 0 0 0
[ 1056.491970][ T1571] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1056.497528][ T1571] Node 0 DMA32: 977*4kB (UE) 329*8kB (UME) 591*16kB (UME) 403*32kB (UME) 201*64kB (UME) 96*128kB (UME) 81*256kB (UM) 56*512kB (UME) 33*1024kB (UME) 6*2048kB (ME) 32*4096kB (UM) = 280604kB
[ 1056.505710][ T1571] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[ 1056.513079][ T1571] Node 1 Normal: 994*4kB (UME) 547*8kB (UME) 178*16kB (UME) 148*32kB (UME) 160*64kB (UME) 110*128kB (UME) 48*256kB (UME) 37*512kB (UM) 16*1024kB (UM) 2*2048kB (UM) 76*4096kB (UM) = 403264kB
[ 1056.521153][ T1571] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1056.525270][ T1571] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1056.529266][ T1571] 45914 total pagecache pages
[ 1056.531461][ T1571] 0 pages in swap cache
[ 1056.533564][ T1571] Free swap  = 124996kB
[ 1056.535389][ T1571] Total swap = 124996kB
[ 1056.537338][ T1571] 786301 pages RAM
[ 1056.539062][ T1571] 0 pages HighMem/MovableOnly
[ 1056.542102][ T1571] 241552 pages reserved
[ 1056.544058][ T1571] 0 pages cma reserved
[ 1057.249281][ T1588] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1057.768670][ T1625] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1060.744266][ T1716] pim6reg: entered allmulticast mode
[ 1060.779038][ T1705] pim6reg: left allmulticast mode
[ 1061.340268][ T1739] veth0: entered promiscuous mode
[ 1061.497415][ T1738] veth0: left promiscuous mode
[ 1067.757978][ T1903] cgroup: fork rejected by pids controller in /syz3
[ 1072.633499][   T33] audit: type=1800 audit(1758316645.686:18): pid=3595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.24564" name="file1" dev="tmpfs" ino=42281 res=0 errno=0
[ 1073.048701][ T3604] dvmrp0: entered allmulticast mode
[ 1073.234403][ T3610] can: request_module (can-proto-5) failed.
[ 1074.809291][   T33] audit: type=1800 audit(1758316647.856:19): pid=3660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.24589" name="file1" dev="tmpfs" ino=3050 res=0 errno=0
[ 1075.492612][ T3665] random: crng reseeded on system resumption
[ 1075.785701][ T3676] veth0: entered promiscuous mode
[ 1075.830743][ T3674] veth0: left promiscuous mode
[ 1076.149010][ T3699] delete_channel: no stack
[ 1076.754480][ T3739] binder: 3738:3739 ioctl 8933 200000000100 returned -22
[ 1076.765396][ T3739] IPVS: set_ctl: invalid protocol: 36864 97.127.0.0:26227
[ 1076.779938][ T3739] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1076.789313][ T3739] binder: 3738:3739 ioctl 40305828 200000000040 returned -22
[ 1077.465226][ T3743] dvmrp1: left allmulticast mode
[ 1077.547077][ T3751] dummy0: entered promiscuous mode
[ 1077.627503][ T3751] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1077.638102][ T3751] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1077.783801][ T3748] dummy0: left promiscuous mode
[ 1078.049085][ T3768] delete_channel: no stack
[ 1078.492081][ T3787] delete_channel: no stack
[ 1084.594355][ T3963] delete_channel: no stack
[ 1084.821615][ T3945] bridge0: entered allmulticast mode
[ 1084.845921][ T3945] pim6reg: entered allmulticast mode
[ 1084.854076][ T3945] pim6reg: left allmulticast mode
[ 1084.864893][ T3945] bridge0: left allmulticast mode
[ 1087.815877][ T4050] TCP: TCP_TX_DELAY enabled
[ 1088.339237][ T4074] can: request_module (can-proto-5) failed.
[ 1088.410185][ T4078] IPVS: stopping backup sync thread 18935 ...
[ 1094.307758][ T4226] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001
[ 1094.671466][ T4236] dummy0: entered allmulticast mode
[ 1094.674006][ T4236] dummy0: left allmulticast mode
[ 1098.851018][ T4293] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1098.854046][ T4293] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1098.856728][ T4293] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1099.960520][ T4350] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001
[ 1099.993695][ T4352] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001
[ 1100.145499][T24483] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1100.932770][T24483] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1100.935807][T24483] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1101.436879][ T4375] dvmrp0: entered allmulticast mode
[ 1101.489973][ T4375] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001
[ 1105.580535][ T4465] binder: 4464:4465 ioctl c00c620f 200000000100 returned -22
[ 1105.930586][ T4472] can: request_module (can-proto-5) failed.
[ 1112.994687][ T4642] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001
[ 1115.440889][ T4678] veth0_to_bridge: entered promiscuous mode
[ 1115.815109][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.817687][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.919050][ T4677] veth0_to_bridge: left promiscuous mode
[ 1116.580038][ T4705] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001
[ 1117.828413][ T4740] can: request_module (can-proto-5) failed.
[ 1118.337580][ T4768] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001
[ 1118.791689][ T4780] can: request_module (can-proto-5) failed.
[ 1119.684610][ T4805] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001
[ 1121.080032][ T5946] delete_channel: no stack
[ 1121.857554][   T33] audit: type=1800 audit(1758316694.896:20): pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.24990" name="file1" dev="tmpfs" ino=3705 res=0 errno=0
[ 1123.373616][ T4890] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001
[ 1125.237111][ T4932] ip6gretap0: entered promiscuous mode
[ 1125.331988][ T4928] ip6gretap0: left promiscuous mode
[ 1127.799393][ T5008] delete_channel: no stack
[ 1128.594302][ T5032] binder: 5031:5032 ioctl 8933 200000000100 returned -22
[ 1128.648534][ T5035] binder: 5031:5035 ioctl 40305828 200000000040 returned -22
[ 1128.915543][ T5044] IPVS: set_ctl: invalid protocol: 28672 114.127.0.0:0
[ 1129.043562][ T5047] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001
[ 1131.788213][ T5114] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001
[ 1136.626796][ T5239] IPVS: set_ctl: invalid protocol: 41 172.30.0.2:20001
[ 1138.371641][ T5304] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20001
[ 1141.371601][ T5411] ip6gretap0: entered promiscuous mode
[ 1141.400428][ T5409] ip6gretap0: left promiscuous mode
[ 1142.039556][ T5437] sock: sock_set_timeout: `syz.3.25210' (pid 5437) tries to set negative timeout
[ 1142.086448][   T33] audit: type=1800 audit(1758316715.136:21): pid=5425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.25204" name="file1" dev="tmpfs" ino=43392 res=0 errno=0
[ 1143.399983][ T5487] delete_channel: no stack
[ 1146.771763][ T5577] dvmrp0: left allmulticast mode
[ 1148.338967][ T5636] delete_channel: no stack
[ 1148.372112][ T5642] delete_channel: no stack
[ 1148.481153][ T5647] sock: sock_set_timeout: `syz.3.25279' (pid 5647) tries to set negative timeout
[ 1148.598924][ T5649] IPVS: Unknown mcast interface: r
[ 1150.844834][ T6233] delete_channel: no stack
[ 1150.922252][ T8122] sock: sock_set_timeout: `syz.3.25296' (pid 8122) tries to set negative timeout
[ 1151.083221][ T8126] bond_slave_0: entered promiscuous mode
[ 1151.087583][ T8125] bond_slave_0: left promiscuous mode
[ 1153.355865][ T9037] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004
[ 1153.428309][ T9135] sock: sock_set_timeout: `syz.3.25326' (pid 9135) tries to set negative timeout
[ 1154.377646][ T9170] delete_channel: no stack
[ 1159.742853][ T9284] bond0: entered promiscuous mode
[ 1159.745003][ T9284] bond_slave_0: entered promiscuous mode
[ 1159.747493][ T9284] bond_slave_1: entered promiscuous mode
[ 1159.762382][ T9283] veth0: entered promiscuous mode
[ 1159.777050][ T9282] veth0: left promiscuous mode
[ 1159.791533][ T9282] bond0: left promiscuous mode
[ 1159.793842][ T9282] bond_slave_0: left promiscuous mode
[ 1159.807139][ T9282] bond_slave_1: left promiscuous mode
[ 1162.813123][ T9385] binder: 9384:9385 ioctl c018620c 200000000100 returned -22
[ 1164.764904][   T33] audit: type=1800 audit(1758316737.816:22): pid=9442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.25427" name="file1" dev="tmpfs" ino=43337 res=0 errno=0
[ 1165.361240][ T9452] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20000
[ 1165.986948][ T9472] veth0: entered promiscuous mode
[ 1166.066148][ T9471] veth0: left promiscuous mode
[ 1167.043043][ T9529] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1168.131822][ T9564] veth0: entered promiscuous mode
[ 1168.414188][ T9565] veth0: left promiscuous mode
[ 1169.867034][ T9636] hsr0: entered promiscuous mode
[ 1169.958546][ T9634] hsr0: left promiscuous mode
[ 1170.070293][ T9641] syz_tun: entered promiscuous mode
[ 1170.933980][ T9640] syz_tun: left promiscuous mode
[ 1171.403239][ T9658] hsr0: entered promiscuous mode
[ 1171.805597][ T9657] hsr0: left promiscuous mode
[ 1172.464538][ T9685] ip6gretap0: entered promiscuous mode
[ 1172.472400][ T9683] ip6gretap0: left promiscuous mode
[ 1173.152593][ T9708] dummy0: entered allmulticast mode
[ 1173.160128][ T9708] dummy0: left allmulticast mode
[ 1177.254648][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.257220][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.325308][ T9880] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20003
[ 1178.836047][ T9889] dvmrp0: entered allmulticast mode
[ 1178.854576][ T9889] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004
[ 1179.727984][ T9908] delete_channel: no stack
[ 1180.288692][ T9925] hsr0: entered promiscuous mode
[ 1180.388549][ T9924] hsr0: left promiscuous mode
[ 1182.038200][ T9990] dummy0: entered allmulticast mode
[ 1182.075758][ T9995] hsr0: entered promiscuous mode
[ 1182.078066][ T9994] hsr0: left promiscuous mode
[ 1182.221211][T10003] hsr0: entered promiscuous mode
[ 1182.426774][T10002] hsr0: left promiscuous mode
[ 1182.790239][T10021] dvmrp5: entered allmulticast mode
[ 1182.876621][T10025] binder_alloc: binder_alloc_mmap_handler: 10024 200000ffd000-200001000000 already mapped failed -16
[ 1185.013035][T10061] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1185.018838][T10061] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1185.030200][T10061] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1185.349307][T11406] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20004
[ 1185.626320][T11424] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004
[ 1186.093076][T11451] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004
[ 1186.291116][T26385] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1187.091002][T26385] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1187.095360][T26385] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1189.194599][T11552] bond0: entered promiscuous mode
[ 1189.196603][T11552] bond_slave_0: entered promiscuous mode
[ 1189.198954][T11552] bond_slave_1: entered promiscuous mode
[ 1189.228561][T11551] bond0: left promiscuous mode
[ 1189.230742][T11551] bond_slave_0: left promiscuous mode
[ 1189.240019][T11551] bond_slave_1: left promiscuous mode
[ 1190.951074][T11597] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1190.995693][T11597] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1191.027722][T11590] random: crng reseeded on system resumption
[ 1191.303272][T11612] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004
[ 1191.764649][T11634] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004
[ 1191.938548][   T33] audit: type=1804 audit(1758316764.986:23): pid=11638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.25736" name="/newroot/8668/bus" dev="tmpfs" ino=44280 res=1 errno=0
[ 1194.984860][T11735] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[ 1194.993328][T11735] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1195.169632][T11734] delete_channel: no stack
[ 1195.778569][T11754] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20002
[ 1196.504818][T11761] pimreg: entered allmulticast mode
[ 1199.700558][T11862] macvlan1: entered promiscuous mode
[ 1199.703399][T11861] macvlan1: left promiscuous mode
[ 1205.412768][T13507] syz.3.25854: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1205.422145][T13507] CPU: 0 UID: 0 PID: 13507 Comm: syz.3.25854 Not tainted syzkaller #0 PREEMPT(full) 
[ 1205.422166][T13507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1205.422175][T13507] Call Trace:
[ 1205.422182][T13507]  <TASK>
[ 1205.422189][T13507]  dump_stack_lvl+0x189/0x250
[ 1205.422216][T13507]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1205.422233][T13507]  ? __pfx__printk+0x10/0x10
[ 1205.422252][T13507]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1205.422268][T13507]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1205.422284][T13507]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[ 1205.422301][T13507]  warn_alloc+0x214/0x310
[ 1205.422334][T13507]  ? __pfx_warn_alloc+0x10/0x10
[ 1205.422356][T13507]  ? __get_vm_area_node+0x28f/0x300
[ 1205.422377][T13507]  ? xskq_create+0xbf/0x170
[ 1205.422401][T13507]  __vmalloc_node_range_noprof+0x67e/0x12f0
[ 1205.422446][T13507]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1205.422471][T13507]  ? __kasan_kmalloc+0x93/0xb0
[ 1205.422490][T13507]  vmalloc_user_noprof+0xad/0xf0
[ 1205.422511][T13507]  ? xskq_create+0xbf/0x170
[ 1205.422532][T13507]  xskq_create+0xbf/0x170
[ 1205.422555][T13507]  xsk_init_queue+0xb0/0x110
[ 1205.422578][T13507]  xsk_setsockopt+0x57b/0x8d0
[ 1205.422599][T13507]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1205.422621][T13507]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1205.422640][T13507]  ? aa_sock_opt_perm+0xff/0x1b0
[ 1205.422663][T13507]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1205.422677][T13507]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1205.422698][T13507]  do_sock_setsockopt+0x17c/0x1b0
[ 1205.422720][T13507]  __x64_sys_setsockopt+0x13f/0x1b0
[ 1205.422741][T13507]  do_syscall_64+0xfa/0xfa0
[ 1205.422754][T13507]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1205.422768][T13507]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1205.422782][T13507]  ? exc_page_fault+0xab/0x100
[ 1205.422798][T13507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1205.422812][T13507] RIP: 0033:0x7fa2eef8eba9
[ 1205.422828][T13507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1205.422841][T13507] RSP: 002b:00007fa2efd67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1205.422857][T13507] RAX: ffffffffffffffda RBX: 00007fa2ef1d5fa0 RCX: 00007fa2eef8eba9
[ 1205.422867][T13507] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000006
[ 1205.422876][T13507] RBP: 00007fa2ef011e19 R08: 0000000000000004 R09: 0000000000000000
[ 1205.422885][T13507] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[ 1205.422893][T13507] R13: 00007fa2ef1d6038 R14: 00007fa2ef1d5fa0 R15: 00007ffdbba82b58
[ 1205.422916][T13507]  </TASK>
[ 1205.422928][T13507] Mem-Info:
[ 1205.537583][T13507] active_anon:6887 inactive_anon:0 isolated_anon:0
[ 1205.537583][T13507]  active_file:1994 inactive_file:38715 isolated_file:0
[ 1205.537583][T13507]  unevictable:1768 dirty:234 writeback:0
[ 1205.537583][T13507]  slab_reclaimable:10327 slab_unreclaimable:53138
[ 1205.537583][T13507]  mapped:18766 shmem:2458 pagetables:1072
[ 1205.537583][T13507]  sec_pagetables:0 bounce:0
[ 1205.537583][T13507]  kernel_misc_reclaimable:0
[ 1205.537583][T13507]  free:286846 free_pcp:26426 free_cma:0
[ 1205.537656][T13507] Node 0 active_anon:14556kB inactive_anon:0kB active_file:5172kB inactive_file:136284kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38796kB dirty:684kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6532kB pagetables:1768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1205.537692][T13507] Node 1 active_anon:12992kB inactive_anon:0kB active_file:2804kB inactive_file:18576kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36268kB dirty:252kB writeback:0kB shmem:13736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7252kB pagetables:2520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1205.537725][T13507] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1205.537770][T13507] lowmem_reserve[]: 0 810 810 810 810
[ 1205.537804][T13507] Node 0 DMA32 free:269184kB boost:0kB min:33600kB low:42000kB high:50400kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14556kB inactive_anon:0kB active_file:5172kB inactive_file:136284kB unevictable:3536kB writepending:684kB zspages:0kB present:1556484kB managed:830068kB mlocked:0kB bounce:0kB free_pcp:57952kB local_pcp:38620kB free_cma:0kB
[ 1205.537849][T13507] lowmem_reserve[]: 0 0 0 0 0
[ 1205.537881][T13507] Node 1 DMA32 free:458492kB boost:0kB min:19212kB low:24012kB high:28812kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[ 1205.537925][T13507] lowmem_reserve[]: 0 0 854 854 854
[ 1205.537957][T13507] Node 1 Normal free:404348kB boost:0kB min:36652kB low:45812kB high:54972kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12992kB inactive_anon:0kB active_file:2804kB inactive_file:18576kB unevictable:3536kB writepending:252kB zspages:0kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:47636kB local_pcp:17400kB free_cma:0kB
[ 1205.538002][T13507] lowmem_reserve[]: 0 0 0 0 0
[ 1205.538035][T13507] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1205.538189][T13507] Node 0 DMA32: 708*4kB (UME) 598*8kB (UME) 672*16kB (UME) 428*32kB (UME) 196*64kB (UME) 79*128kB (UME) 100*256kB (UME) 67*512kB (UME) 41*1024kB (UME) 5*2048kB (UME) 25*4096kB (M) = 269248kB
[ 1205.538333][T13507] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[ 1205.538476][T13507] Node 1 Normal: 1271*4kB (U) 884*8kB (UM) 432*16kB (UE) 502*32kB (UE) 165*64kB (UE) 82*128kB (UM) 46*256kB (UME) 35*512kB (UME) 15*1024kB (UM) 6*2048kB (UME) 71*4096kB (UM) = 404348kB
[ 1205.538620][T13507] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1205.538634][T13507] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB
[ 1205.538648][T13507] 43173 total pagecache pages
[ 1205.538655][T13507] 0 pages in swap cache
[ 1205.538661][T13507] Free swap  = 124996kB
[ 1205.538668][T13507] Total swap = 124996kB
[ 1205.538676][T13507] 786301 pages RAM
[ 1205.538681][T13507] 0 pages HighMem/MovableOnly
[ 1205.538687][T13507] 241552 pages reserved
[ 1205.538694][T13507] 0 pages cma reserved
[ 1205.784999][T13523] IPVS: set_ctl: invalid protocol: 0 4.0.0.2:16
[ 1206.584847][T13543] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004
[ 1206.686175][T13549] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1206.908398][T13556] geneve0: entered promiscuous mode
[ 1206.912548][T13555] geneve0: left promiscuous mode
[ 1208.502288][T13598] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20004
[ 1210.315568][T13927] veth0: entered promiscuous mode
[ 1210.318513][T13927] veth0: left promiscuous mode
[ 1213.150926][T14020] delete_channel: no stack
[ 1214.308156][T14058] pim6reg: entered allmulticast mode
[ 1214.374501][T14078] binder: 14077:14078 ioctl 8933 200000000080 returned -22
[ 1214.567392][T14057] pim6reg: left allmulticast mode
[ 1214.714745][T14087] pimreg: left allmulticast mode
[ 1214.774173][T14087] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004
[ 1216.933965][   T33] audit: type=1800 audit(1758316789.986:24): pid=14168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.25988" name="file1" dev="tmpfs" ino=44313 res=0 errno=0
[ 1217.068430][T14187] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20004
[ 1220.528972][T14272] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004
[ 1221.407590][T14291] IPVS: set_ctl: invalid protocol: 1 172.30.0.2:20002
[ 1221.415426][T14291] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20000
[ 1222.287680][T14308] delete_channel: no stack
[ 1222.977448][T14340] hsr0: entered promiscuous mode
[ 1223.040733][T14339] hsr0: left promiscuous mode
[ 1224.565582][T14362] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20004
[ 1224.638283][T14369] IPVS: set_ctl: invalid protocol: 1 172.30.0.2:20002
[ 1224.652280][T14369] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20000
[ 1225.599161][T14394] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20004
[ 1227.490892][T14437] delete_channel: no stack
[ 1234.092381][T14603] dummy0: entered promiscuous mode
[ 1234.252381][T14602] dummy0: left promiscuous mode
[ 1234.775570][T14617] binder: 14616:14617 ioctl c00c620f 200000000100 returned -22
[ 1235.285584][T14629] pim6reg: entered allmulticast mode
[ 1235.290149][T14628] pim6reg: left allmulticast mode
[ 1236.904289][T14692] macvlan1: entered promiscuous mode
[ 1236.908552][T14691] macvlan1: left promiscuous mode
[ 1237.068642][T14700] dvmrp1: entered allmulticast mode
[ 1238.697826][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.701246][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.432590][T14761] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:19488
[ 1239.469710][T14764] delete_channel: no stack
[ 1240.637528][T14808] dvmrp5: entered allmulticast mode
[ 1246.934594][T14978] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20002
[ 1247.176722][T14985] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001
[ 1252.245260][T15169] IPVS: stopping backup sync thread 19973 ...
[ 1253.565291][T15210] delete_channel: no stack
[ 1253.814436][T15216] veth1_to_bond: entered allmulticast mode
[ 1253.816982][T15215] veth1_to_bond: left allmulticast mode
[ 1254.325282][T15252] binder: 15251:15252 ioctl c00c620f 200000000100 returned -22
[ 1254.551915][T15257] pim6reg: entered allmulticast mode
[ 1254.718036][   T33] audit: type=1800 audit(1758316827.756:25): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.26359" name="file1" dev="tmpfs" ino=44998 res=0 errno=0
[ 1255.379225][T15285] delete_channel: no stack
[ 1256.063270][T15310] delete_channel: no stack
[ 1256.804808][T15343] binder: 15342:15343 ioctl c00c620f 200000000100 returned -22
[ 1259.300574][T15428] pim6reg: entered allmulticast mode
[ 1259.316735][T15428] pim6reg: left allmulticast mode
[ 1259.318886][T15428] dummy0: left allmulticast mode
[ 1261.385946][T15466] dvmrp0: left allmulticast mode
[ 1265.346058][T15564] binder: binder_mmap: 15562 200000000000-200000b36000 bad vm_flags failed -1
[ 1266.065327][T15583] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1266.068762][T15583] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1266.077773][T15583] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1266.157702][T15588] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1266.678244][T15600] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004
[ 1271.547417][   T33] audit: type=1804 audit(1758316844.516:26): pid=15687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.26509" name="/newroot/1218/bus" dev="tmpfs" ino=6266 res=1 errno=0
[ 1271.755502][T15693] vlan0: entered promiscuous mode
[ 1271.758413][T15692] vlan0: left promiscuous mode
[ 1272.080445][T15702] veth0: entered promiscuous mode
[ 1272.431604][T15701] veth0: left promiscuous mode
[ 1272.699980][T15712] delete_channel: no stack
[ 1277.492573][T15845] dvmrp0: left allmulticast mode
[ 1277.498988][T15845] dvmrp1: left allmulticast mode
[ 1277.502499][T15845] dvmrp5: left allmulticast mode
[ 1277.683080][T15852] veth0: entered promiscuous mode
[ 1277.686792][T15852] veth0: left promiscuous mode
[ 1279.488327][T15911] veth0: entered promiscuous mode
[ 1279.490586][T15911] veth0: left promiscuous mode
[ 1279.827570][T15910] IPVS: stopping backup sync thread 15925 ...
[ 1279.830412][T15925] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6tnl0, syncid = 4, id = 0
[ 1279.911299][T15910] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:52770
[ 1281.695649][T15985] delete_channel: no stack
[ 1282.536310][T16025] delete_channel: no stack
[ 1282.600042][T16030] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[ 1284.318512][T16095] delete_channel: no stack
[ 1284.670948][T16127] delete_channel: no stack
[ 1291.433016][T16368] IPVS: set_ctl: invalid protocol: 22 0.0.0.8:20002
[ 1291.782984][T16377] random: crng reseeded on system resumption
[ 1292.009104][T16381] IPVS: Scheduler module ip_vs_ not found
[ 1294.803982][T16427] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20030
[ 1294.807191][T16429] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20030
[ 1296.499488][T16479] veth0: entered promiscuous mode
[ 1296.505939][T16479] syz_tun: left allmulticast mode
[ 1296.514519][T16477] veth0: left promiscuous mode
[ 1297.185512][   T33] audit: type=1804 audit(1758316870.236:27): pid=16497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.26778" name="/newroot/9042/bus" dev="tmpfs" ino=46214 res=1 errno=0
[ 1297.777682][T16520] random: crng reseeded on system resumption
[ 1298.043368][T16532] dvmrp0: entered allmulticast mode
[ 1298.048709][T16532] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004
[ 1298.182892][T16541] random: crng reseeded on system resumption
[ 1300.134761][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.137476][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[ 1301.567340][T16664] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004
[ 1302.179376][T16691] binder: 16690:16691 ioctl c00c620f 200000000100 returned -22
[ 1303.300451][T16726] delete_channel: no stack
[ 1303.693821][T16768] IPVS: stopping master sync thread 12770 ...
[ 1303.747892][T16768] IPVS: set_ctl: invalid protocol: 98 10.1.1.1:20003
[ 1305.008554][T16818] veth1_to_bond: entered promiscuous mode
[ 1305.170177][T16816] veth1_to_bond: left promiscuous mode
[ 1305.239399][T16823] tipc: Trying to set illegal importance in message
[ 1310.060851][   T33] audit: type=1800 audit(1758316883.116:28): pid=16948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.26931" name="file1" dev="tmpfs" ino=46477 res=0 errno=0
[ 1310.404864][T16966] vlan0: entered promiscuous mode
[ 1310.412891][T16965] vlan0: left promiscuous mode
[ 1314.794072][T17095] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20000
[ 1316.086527][T17139] can: request_module (can-proto-0) failed.
[ 1316.100233][T17139] bond0: entered promiscuous mode
[ 1316.102311][T17139] bond_slave_0: entered promiscuous mode
[ 1316.110016][T17139] bond_slave_1: entered promiscuous mode
[ 1316.179117][T17138] bond0: left promiscuous mode
[ 1316.181123][T17138] bond_slave_0: left promiscuous mode
[ 1316.183600][T17138] bond_slave_1: left promiscuous mode
[ 1316.410662][T17154] vlan0: entered promiscuous mode
[ 1316.415255][T17152] vlan0: left promiscuous mode
[ 1316.741012][T17171] delete_channel: no stack
[ 1317.095967][T17193] IPVS: set_ctl: invalid protocol: 0 162.127.0.0:27746
[ 1317.634238][T17213] dvmrp8: entered allmulticast mode
[ 1317.637418][T17212] dvmrp8: left allmulticast mode
[ 1317.987581][T17245] bond0: entered promiscuous mode
[ 1317.992581][T17245] bond_slave_0: entered promiscuous mode
[ 1317.995027][T17245] bond_slave_1: entered promiscuous mode
[ 1318.019269][T17244] bond0: left promiscuous mode
[ 1318.021396][T17244] bond_slave_0: left promiscuous mode
[ 1318.023600][T17244] bond_slave_1: left promiscuous mode
[ 1320.087628][T17302] macvtap0: entered promiscuous mode
[ 1320.173388][T17301] macvtap0: left promiscuous mode
[ 1321.639545][T17345] veth0: entered promiscuous mode
[ 1321.666524][T17345] dvmrp0: left allmulticast mode
[ 1322.472571][T17344] veth0: left promiscuous mode
[ 1325.489714][T17452] hsr0: entered promiscuous mode
[ 1325.671074][T17451] hsr0: left promiscuous mode
[ 1325.678761][T17454] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004
[ 1327.694365][T17547] binder: 17546:17547 ioctl c00c620f 200000000100 returned -22
[ 1328.188314][T17567] hsr0: entered promiscuous mode
[ 1328.587829][T17566] hsr0: left promiscuous mode
[ 1328.907991][T17588] IPVS: set_ctl: invalid protocol: 26992 101.103.49.0:0
[ 1328.913140][T17588] ubi0: attaching mtd0
[ 1328.918638][T17588] ubi0: scanning is finished
[ 1328.921323][T17588] ubi0: empty MTD device detected
[ 1329.081965][T17588] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1329.108307][T17588] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1329.116157][T17588] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1329.128178][T17588] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[ 1329.139441][T17588] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1329.149612][T17588] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1329.153627][T17588] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 575890297
[ 1329.168633][T17588] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1329.174548][T17593] ubi0: background thread "ubi_bgt0d" started, PID 17593
[ 1329.449421][T17608] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20000
[ 1330.330802][T17641] delete_channel: no stack
[ 1331.393796][T17685] vlan0: entered promiscuous mode
[ 1331.401291][T17684] vlan0: left promiscuous mode
[ 1333.218560][T17729] ubi: mtd0 is already attached to ubi0
[ 1333.787256][T17749] ubi: mtd0 is already attached to ubi0
[ 1335.059691][T17770] ubi: mtd0 is already attached to ubi0
[ 1336.365044][T17831] macvlan1: entered promiscuous mode
[ 1336.367745][T17829] macvlan1: left promiscuous mode
[ 1336.689427][   T33] audit: type=1800 audit(1758316909.736:29): pid=17840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.27225" name="file1" dev="tmpfs" ino=46215 res=0 errno=0
[ 1337.890016][   T33] audit: type=1800 audit(1758316910.936:30): pid=17870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.27236" name=84 dev="tmpfs" ino=7648 res=0 errno=0
[ 1339.247296][T17901] IPVS: set_ctl: invalid protocol: 26992 101.103.49.0:0
[ 1339.251358][T17901] ubi: mtd0 is already attached to ubi0
[ 1339.411763][T17916] sock: sock_set_timeout: `syz.3.27251' (pid 17916) tries to set negative timeout
[ 1345.611001][T18079] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002
[ 1345.886264][   T33] audit: type=1800 audit(1758316918.936:31): pid=18083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.27312" name="file1" dev="tmpfs" ino=7797 res=0 errno=0
[ 1349.787214][T18199] IPVS: set_ctl: invalid protocol: 25647 47.112.116.112:12288
[ 1353.062086][T18311] IPVS: set_ctl: invalid protocol: 26992 101.103.49.0:0
[ 1353.071889][T18311] ubi: mtd0 is already attached to ubi0
[ 1356.321450][T18406] ip6gretap0: entered promiscuous mode
[ 1357.081714][T18405] ip6gretap0: left promiscuous mode
[ 1358.061245][T18443] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1358.067032][T18443] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1358.078275][T18443] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1361.586083][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.589057][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.687733][T18570] IPVS: set_ctl: invalid protocol: 26992 101.103.49.0:0
[ 1361.691585][T18568] ubi: mtd0 is already attached to ubi0
[ 1362.367958][T18588] can: request_module (can-proto-5) failed.
[ 1366.709200][T18670] delete_channel: no stack
[ 1368.741954][T18734] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1371.939317][T18805] delete_channel: no stack
[ 1373.002562][T18856] binder: 18855:18856 ioctl c00c620f 200000000100 returned -22
[ 1374.316329][T18887] random: crng reseeded on system resumption
[ 1375.310711][T18920] delete_channel: no stack
[ 1375.316712][T18917] delete_channel: no stack
[ 1375.823509][T18934] delete_channel: no stack
[ 1377.195918][T18967] pim6reg9: entered allmulticast mode
[ 1377.661470][T18972] IPVS: set_ctl: invalid protocol: 26992 101.103.49.0:0
[ 1377.665310][T18972] ubi: mtd0 is already attached to ubi0
[ 1378.789349][T19021] IPVS: set_ctl: invalid protocol: 26992 101.103.49.0:0
[ 1378.792647][T19021] ubi: mtd0 is already attached to ubi0
[ 1379.581857][T19051] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000
[ 1381.893621][T19109] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[ 1381.900072][T19109] dvmrp5: left allmulticast mode
[ 1383.621007][T19132] delete_channel: no stack
[ 1383.627500][T19132] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001
[ 1384.209387][T19163] binder: 19162:19163 ioctl 40046210 200000000100 returned -14
[ 1386.734933][T19243] bond0: entered promiscuous mode
[ 1386.737051][T19243] bond_slave_0: entered promiscuous mode
[ 1386.739384][T19243] bond_slave_1: entered promiscuous mode
[ 1386.798488][T19241] bond0: left promiscuous mode
[ 1386.802187][T19241] bond_slave_0: left promiscuous mode
[ 1386.804588][T19241] bond_slave_1: left promiscuous mode
[ 1388.079438][T19279] delete_channel: no stack
[ 1388.490259][T19298] macvtap0: entered promiscuous mode
[ 1389.298952][T19297] macvtap0: left promiscuous mode
[ 1389.314552][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1389.320832][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1389.327123][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1389.333302][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1389.338422][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1389.344322][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1389.351004][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1389.355761][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1389.360822][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1389.365730][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1394.327045][T19300] tty_init_dev: 1938 callbacks suppressed
[ 1394.327061][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1394.336439][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1394.343672][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1394.348126][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1394.355420][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1394.361235][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1394.365650][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1394.389663][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1394.400643][T19404] ttynull ttynull: ldisc open failed (-12), clearing slot 0
[ 1394.411488][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1395.932021][T19432] delete_channel: no stack
[ 1397.833087][T19460] IPVS: set_ctl: invalid protocol: 26992 101.103.49.0:0
[ 1397.836288][T19460] ubi: mtd0 is already attached to ubi0
[ 1398.758879][T19474] IPVS: set_ctl: invalid protocol: 26992 101.103.49.0:0
[ 1398.776224][T19474] ubi: mtd0 is already attached to ubi0
[ 1398.897379][T19480] dvmrp1: entered allmulticast mode
[ 1398.982867][T19484] delete_channel: no stack
[ 1399.332311][T19300] tty_init_dev: 1756 callbacks suppressed
[ 1399.332328][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1399.341844][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1399.345048][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1399.348492][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1399.352045][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1399.356048][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1399.360989][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1399.364967][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1399.368437][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1399.372789][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1403.782235][T24483] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1403.788068][T24483] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1403.793482][T24483] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1403.797293][T24483] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1403.805030][T24483] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1404.226107][T19575] chnl_net:caif_netlink_parms(): no params data found
[ 1404.370021][T19300] tty_init_dev: 1836 callbacks suppressed
[ 1404.370034][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1404.401121][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1404.421365][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1404.456401][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1404.506315][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1404.524805][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1404.541624][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1404.548067][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1404.556570][T19575] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1404.559527][T19575] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1404.571943][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1404.576429][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1404.603404][T19575] bridge_slave_0: entered allmulticast mode
[ 1404.613769][T19575] bridge_slave_0: entered promiscuous mode
[ 1404.635151][T19575] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1404.652836][T19575] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1404.655745][T19575] bridge_slave_1: entered allmulticast mode
[ 1404.671478][T19575] bridge_slave_1: entered promiscuous mode
[ 1404.801076][T19575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1404.821335][T19575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1404.941974][T19575] team0: Port device team_slave_0 added
[ 1404.951264][T19575] team0: Port device team_slave_1 added
[ 1405.057423][T19575] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1405.059683][T19575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1405.097463][T19575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1405.114217][T19575] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1405.116622][T19575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1405.142492][T19575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1405.327414][T19575] hsr_slave_0: entered promiscuous mode
[ 1405.350460][T19575] hsr_slave_1: entered promiscuous mode
[ 1405.770317][T19575] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1405.781456][T19575] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1405.788309][T19575] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1405.797119][T19575] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1405.891071][T11485] Bluetooth: hci0: command tx timeout
[ 1405.949648][T19575] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1405.996368][T19575] 8021q: adding VLAN 0 to HW filter on device team0
[ 1406.043346][T30601] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1406.046719][T30601] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1406.071206][T30601] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1406.074280][T30601] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1406.185014][T19575] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1406.189318][T19575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1406.435737][T19575] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1406.884035][T19575] veth0_vlan: entered promiscuous mode
[ 1406.893499][T19575] veth1_vlan: entered promiscuous mode
[ 1406.921716][T19575] veth0_macvtap: entered promiscuous mode
[ 1406.928632][T19575] veth1_macvtap: entered promiscuous mode
[ 1406.947096][T19575] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1406.964414][T19575] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1406.982819][T24521] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1406.986532][T24521] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1407.002024][T24521] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1407.009698][T24521] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1407.138114][ T5351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1407.145244][ T5351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1407.191542][T30601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1407.195525][T30601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1407.975858][T11485] Bluetooth: hci0: command tx timeout
[ 1409.381453][T19300] tty_init_dev: 1264 callbacks suppressed
[ 1409.381468][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1409.401411][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1409.410961][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1409.418367][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1409.427687][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1409.433362][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1409.441988][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1409.446881][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1409.452879][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1409.458138][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1410.050123][T11485] Bluetooth: hci0: command tx timeout
[ 1412.130177][T11485] Bluetooth: hci0: command tx timeout
[ 1414.396817][T19300] tty_init_dev: 921 callbacks suppressed
[ 1414.396834][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1414.406648][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1414.420966][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1414.426774][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1414.460920][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1414.468879][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1414.491740][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1414.498412][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1414.509157][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1414.521610][T19300] ptm ptm64: ldisc open failed (-12), clearing slot 64
[ 1414.788790][T19787] syz_tun: entered allmulticast mode
[ 1416.150568][ T5880] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1416.437724][ T5880] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1416.644887][ T5880] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1416.828042][T19820] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1416.837366][ T5880] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1417.210421][ T5880] bridge_slave_1: left allmulticast mode
[ 1417.217336][ T5880] bridge_slave_1: left promiscuous mode
[ 1417.232703][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1417.325169][ T5880] bridge_slave_0: left allmulticast mode
[ 1417.333324][ T5880] bridge_slave_0: left promiscuous mode
[ 1417.336008][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1419.104187][ T5880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1419.132606][ T5880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1419.145309][ T5880] bond0 (unregistering): Released all slaves
[ 1419.428390][ T5880] IPVS: stopping master sync thread 9830 ...
[ 1419.433829][T19868] pim6reg: entered allmulticast mode
[ 1419.608236][T19873] pim6reg: left allmulticast mode
[ 1419.988847][ T5880] hsr_slave_0: left promiscuous mode
[ 1420.020003][ T5880] hsr_slave_1: left promiscuous mode
[ 1420.026619][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1420.046418][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1420.057401][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1420.067583][T19891] IPVS: set_ctl: invalid protocol: 26992 101.103.49.0:0
[ 1420.074838][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1420.084124][T19891] ubi: mtd0 is already attached to ubi0
[ 1420.104283][ T5880] veth1_macvtap: left promiscuous mode
[ 1420.116367][ T5880] veth0_macvtap: left promiscuous mode
[ 1420.126104][ T5880] veth1_vlan: left promiscuous mode
[ 1420.128086][ T5880] veth0_vlan: left promiscuous mode
[ 1420.257378][ T5880] pim6reg9 (unregistering): left allmulticast mode
[ 1420.275479][ T5880] pimreg3 (unregistering): left allmulticast mode
[ 1421.078524][ T5880] team0 (unregistering): Port device team_slave_1 removed
[ 1421.155347][ T5880] team0 (unregistering): Port device team_slave_0 removed
[ 1421.622832][T19912] dummy0: entered allmulticast mode
[ 1421.625357][T19915] dummy0: left allmulticast mode
[ 1421.784354][T11668] IPVS: starting estimator thread 0...
[ 1421.907184][T19936] IPVS: using max 33 ests per chain, 79200 per kthread
[ 1422.361678][ T5880] IPVS: stop unused estimator thread 0...
[ 1423.015125][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.017952][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[ 1424.136174][T20019] veth0_to_bridge: entered promiscuous mode
[ 1424.233408][T20018] veth0_to_bridge: left promiscuous mode
[ 1426.744383][T20080] binder: 20079:20080 ioctl c00c620f 200000000100 returned -22
[ 1427.789128][T20115] binder: 20114:20115 ioctl 8933 200000000100 returned -22
[ 1428.988491][T20159] delete_channel: no stack
[ 1430.315821][T20192] delete_channel: no stack
[ 1439.418267][T20394] IPVS: Unknown mcast interface: N!
[ 1440.667507][T20436] binder: 20435:20436 ioctl c00c620f 200000000100 returned -22
[ 1441.030998][T20446] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:2
[ 1441.543957][T20470] pim6reg9: entered allmulticast mode
[ 1443.850056][T20532] binder: 20531:20532 ioctl c00c620f 200000000100 returned -22
[ 1445.294062][T20572] delete_channel: no stack
[ 1447.680489][T20632] binder: 20631:20632 ioctl c00c620f 200000000100 returned -22
[ 1448.249931][T18308] delete_channel: no stack
[ 1448.457478][T20666] binder: 20665:20666 ioctl c00c620f 200000000100 returned -22
[ 1448.572860][T20675] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1448.581223][T20675] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1449.666552][T20689] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001
[ 1449.829947][T20702] IPVS: Scheduler module ip_vs_ not found
[ 1452.152915][T20773] pim6reg: entered allmulticast mode
[ 1452.499987][T20785] pim6reg: left allmulticast mode
[ 1452.611850][T20791] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1454.560089][T20833] binder: 20832:20833 ioctl c00c620f 200000000100 returned -22
[ 1458.605320][T20937] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1462.412798][T21019] macvtap0: entered promiscuous mode
[ 1462.444212][T21018] macvtap0: left promiscuous mode
[ 1463.061102][T21045] macvtap0: entered promiscuous mode
[ 1463.080421][T21045] macvtap0: left promiscuous mode
[ 1464.060522][T21078] tipc: Trying to set illegal importance in message
[ 1464.761200][T21104] binder: 21103:21104 ioctl 8933 2000000001c0 returned -22
[ 1464.838873][T21116] IPVS: set_ctl: invalid protocol: 16384 114.127.0.0:5
[ 1465.127224][T21124] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1465.408574][T21135] binder: 21134:21135 ioctl 8933 2000000001c0 returned -22
[ 1465.780654][   T33] audit: type=1804 audit(1758317038.836:32): pid=21152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.28332" name="/newroot/181/bus" dev="tmpfs" ino=946 res=1 errno=0
[ 1465.977812][T21155] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[ 1465.987314][T21155] veth0: entered promiscuous mode
[ 1466.022590][T21154] veth0: left promiscuous mode
[ 1466.043644][T21154] delete_channel: no stack
[ 1466.049697][T21154] delete_channel: no stack
[ 1467.706287][T21219] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1468.344833][T21239] macvlan1: entered promiscuous mode
[ 1468.348261][T21239] hsr0: entered promiscuous mode
[ 1468.401259][T21238] macvlan1: left promiscuous mode
[ 1468.412364][T21242] delete_channel: no stack
[ 1468.429378][T21238] hsr0: left promiscuous mode
[ 1469.053405][T21258] delete_channel: no stack
[ 1469.441270][T21266] pim6reg: entered allmulticast mode
[ 1469.635440][T21253] pim6reg: left allmulticast mode
[ 1471.142212][T21313] syz_tun: entered promiscuous mode
[ 1471.144872][T21311] syz_tun: left promiscuous mode
[ 1472.047001][T21341] ipvlan0: entered promiscuous mode
[ 1472.051707][T21339] ipvlan0: left promiscuous mode
[ 1474.893915][T21419] binder: 21418:21419 ioctl 8933 2000000001c0 returned -22
[ 1475.856835][T21453] binder: 21452:21453 ioctl 400c620e 200000000100 returned -14
[ 1475.938155][T21459] veth0: entered promiscuous mode
[ 1475.970471][T21458] veth0: left promiscuous mode
[ 1477.867557][T21517] IPVS: set_ctl: invalid protocol: 92 172.20.20.48:20001
[ 1479.243326][T21558] binder: 21557:21558 ioctl 8933 2000000001c0 returned -22
[ 1482.420102][T21626] delete_channel: no stack
[ 1483.503541][T21647] veth0_to_bond: entered promiscuous mode
[ 1483.511064][T21646] veth0_to_bond: left promiscuous mode
[ 1484.456973][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.459704][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.822945][T21671] delete_channel: no stack
[ 1490.515219][T21795] ubi: mtd0 is already attached to ubi0
[ 1490.929108][T21809] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20003
[ 1493.835312][T21894] pimreg: entered allmulticast mode
[ 1496.114155][T21933] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001
[ 1497.225105][T21959] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1497.250902][T21959] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[ 1499.866403][T22035] pimreg: entered allmulticast mode
[ 1499.899889][T22035] pimreg: left allmulticast mode
[ 1500.180847][T22042] dvmrp0: entered allmulticast mode
[ 1501.062267][T22061] delete_channel: no stack
[ 1501.604938][T22089] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20002
[ 1501.770777][T22092] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20000
[ 1502.195580][T22097] veth0: entered promiscuous mode
[ 1502.198082][T22097] veth0: left promiscuous mode
[ 1505.923716][T22202] pimreg: entered allmulticast mode
[ 1508.993403][T22271] pim6reg: entered allmulticast mode
[ 1508.999140][T22271] pim6reg: left allmulticast mode
[ 1509.246694][T22281] veth0: entered promiscuous mode
[ 1509.262702][T22278] veth0: left promiscuous mode
[ 1510.475237][T22319] IPVS: set_ctl: invalid protocol: 26992 101.103.49.0:0
[ 1511.514036][T22338] macvtap0: entered promiscuous mode
[ 1511.533683][T22337] macvtap0: left promiscuous mode
[ 1512.516746][T22363] geneve0: entered promiscuous mode
[ 1512.519384][T22362] geneve0: left promiscuous mode
[ 1512.694150][T22369] random: crng reseeded on system resumption
[ 1515.455580][T22430] IPVS: set_ctl: invalid protocol: 26992 101.103.49.0:0
[ 1515.459130][T22430] ubi0: detaching mtd0
[ 1515.466728][T22430] ubi0: mtd0 is detached
[ 1516.281469][T22453] IPVS: Unknown mcast interface: N!
[ 1519.843590][T22521] delete_channel: no stack
[ 1520.070612][   T33] audit: type=1800 audit(1758317093.116:33): pid=22535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.28810" name="file1" dev="tmpfs" ino=49539 res=0 errno=0
[ 1525.089354][T22686] delete_channel: no stack
[ 1527.002433][T22771] pimreg: left allmulticast mode
[ 1527.058327][T22771] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004
[ 1527.492690][T24483] Bluetooth: hci0: command 0x0406 tx timeout
[ 1530.336367][T22918] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_0, syncid = 4, id = 0
[ 1530.503786][T22925] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20002
[ 1530.597925][T22921] delete_channel: no stack
[ 1531.609189][T22963] bond0: entered promiscuous mode
[ 1531.624721][T22963] bond_slave_0: entered promiscuous mode
[ 1531.651577][T22963] bond_slave_1: entered promiscuous mode
[ 1531.659930][T22962] bond0: left promiscuous mode
[ 1531.661962][T22962] bond_slave_0: left promiscuous mode
[ 1531.663995][T22962] bond_slave_1: left promiscuous mode
[ 1531.761158][T22966] IPVS: stopping master sync thread 22918 ...
[ 1532.183724][   T33] audit: type=1800 audit(1758317105.236:34): pid=22987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.28956" name=84 dev="tmpfs" ino=49819 res=0 errno=0
[ 1535.077910][T23079] ubi0: attaching mtd0
[ 1535.081611][T23079] ubi0: scanning is finished
[ 1535.240395][T23079] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1535.252788][T23079] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1535.262512][T23079] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1535.265423][T23079] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[ 1535.268490][T23079] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1535.275548][T23079] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1535.285616][T23079] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 575890297
[ 1535.289704][T23079] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1535.319360][T23080] ubi0: background thread "ubi_bgt0d" started, PID 23080
[ 1535.713643][T23101] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1535.720375][T23101] ubi: mtd0 is already attached to ubi0
[ 1537.101162][T23131] pim6reg: left allmulticast mode
[ 1539.892054][T23187] ubi: mtd0 is already attached to ubi0
[ 1541.987209][T23243] veth0: entered promiscuous mode
[ 1541.991040][T23243] veth0: left promiscuous mode
[ 1542.229553][T23234] delete_channel: no stack
[ 1542.513367][T23253] delete_channel: no stack
[ 1542.727470][T23253] delete_channel: no stack
[ 1543.350586][T23281] pim6reg: entered allmulticast mode
[ 1543.354047][T23281] pim6reg: left allmulticast mode
[ 1543.826369][T23299] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001
[ 1544.199197][T23308] veth0: entered promiscuous mode
[ 1544.271478][T23309] dvmrp0: left allmulticast mode
[ 1544.408029][T23307] veth0: left promiscuous mode
[ 1544.901639][T23335] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1544.909762][T23336] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1544.917225][T23335] IPVS: set_ctl: invalid protocol: 16384 162.127.0.0:0
[ 1544.930045][T23336] IPVS: set_ctl: invalid protocol: 16384 162.127.0.0:0
[ 1544.933288][T23335] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1545.078158][T23341] sock: sock_set_timeout: `syz.0.29073' (pid 23341) tries to set negative timeout
[ 1545.895036][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[ 1545.898863][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.357118][T23367] ubi: mtd0 is already attached to ubi0
[ 1547.669097][T23407] ubi0: detaching mtd0
[ 1547.675696][T23407] ubi0: mtd0 is detached
[ 1548.931031][T23438] ubi0: attaching mtd0
[ 1548.934305][T23438] ubi0: scanning is finished
[ 1549.073665][T23438] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1549.076928][T23438] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1549.080010][T23438] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1549.082874][T23438] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[ 1549.086912][T23438] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1549.090174][T23438] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1549.093962][T23438] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 575890297
[ 1549.098368][T23438] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1549.102871][T23449] ubi0: background thread "ubi_bgt0d" started, PID 23449
[ 1550.000422][T23477] ubi: mtd0 is already attached to ubi0
[ 1550.222083][T23491] dvmrp1: left allmulticast mode
[ 1551.801558][T23533] geneve0: entered promiscuous mode
[ 1551.832874][T23532] geneve0: left promiscuous mode
[ 1552.219435][T23559] dvmrp0: entered allmulticast mode
[ 1552.474464][T23571] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20000
[ 1553.790583][T23616] ipvlan0: entered promiscuous mode
[ 1553.800744][T23615] ipvlan0: left promiscuous mode
[ 1555.427339][T23647] ubi: mtd0 is already attached to ubi0
[ 1558.641530][T23761] veth0: entered promiscuous mode
[ 1558.822559][T23760] veth0: left promiscuous mode
[ 1562.211939][T23938] dvmrp0: left allmulticast mode
[ 1562.214242][T23938] pimreg: left allmulticast mode
[ 1562.815305][T25383] dvmrp5: entered allmulticast mode
[ 1562.832711][T25383] dvmrp5: left allmulticast mode
[ 1563.082179][T25397] ubi0: detaching mtd0
[ 1563.089175][T25397] ubi0: mtd0 is detached
[ 1563.253944][   T33] audit: type=1800 audit(1758317136.306:35): pid=25408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.29265" name="file1" dev="tmpfs" ino=10979 res=0 errno=0
[ 1563.318475][T25412] binder: 25411:25412 ioctl 400c620e 200000000100 returned -14
[ 1564.125992][T25449] vlan0: entered promiscuous mode
[ 1564.128707][T25448] vlan0: left promiscuous mode
[ 1564.236969][T25453] IPVS: Unknown mcast interface: N!
[ 1565.176455][T25481] veth0: entered promiscuous mode
[ 1565.188401][T25475] veth0: left promiscuous mode
[ 1565.447862][T25499] syz_tun: left allmulticast mode
[ 1567.057421][T25550] IPVS: set_ctl: invalid protocol: 25647 47.118.99.115:29952
[ 1567.381434][T25540] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1567.384318][T25540] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1567.390144][T25540] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1567.392911][T25540] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1568.200099][T25598] dvmrp1: entered allmulticast mode
[ 1568.916717][T25623] ubi0: attaching mtd0
[ 1568.920057][T25623] ubi0: scanning is finished
[ 1569.073384][T25623] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1569.076546][T25623] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1569.078728][T25623] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1569.085705][T25623] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[ 1569.089082][T25623] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1569.094926][T25623] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1569.097795][T25623] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 575890297
[ 1569.102195][T25623] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1569.105215][T25634] ubi0: background thread "ubi_bgt0d" started, PID 25634
[ 1569.113467][   T33] audit: type=1800 audit(1758317142.166:36): pid=25635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.29346" name=F8FFFFFF dev="tmpfs" ino=2861 res=0 errno=0
[ 1569.170283][T11485] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1569.425449][T11485] Bluetooth: hci0: command 0x0406 tx timeout
[ 1569.425487][T24483] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1569.662833][T25662] ubi: mtd0 is already attached to ubi0
[ 1571.502308][T24483] Bluetooth: hci0: command 0x0406 tx timeout
[ 1572.863887][T25752] binder: 25751:25752 ioctl 40000000 2000000003c0 returned -22
[ 1574.362826][   T33] audit: type=1800 audit(1758317147.406:37): pid=25773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.29391" name="file1" dev="tmpfs" ino=2931 res=0 errno=0
[ 1577.034292][T25807] cgroup: fork rejected by pids controller in /syz4
[ 1582.664752][T27012] delete_channel: no stack
[ 1583.145653][T27033] ubi: mtd0 is already attached to ubi0
[ 1586.040280][T27081] IPVS: set_ctl: invalid protocol: 71 127.0.0.1:20001
[ 1586.613639][T11485] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1586.617725][T11485] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1586.622830][T11485] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1586.626649][T11485] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1586.631840][T11485] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1587.042056][T27088] chnl_net:caif_netlink_parms(): no params data found
[ 1587.174016][T27088] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1587.176775][T27088] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1587.179364][T27088] bridge_slave_0: entered allmulticast mode
[ 1587.187347][T27088] bridge_slave_0: entered promiscuous mode
[ 1587.194718][T27088] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1587.198208][T27088] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1587.202785][T27088] bridge_slave_1: entered allmulticast mode
[ 1587.207032][T27088] bridge_slave_1: entered promiscuous mode
[ 1587.341551][T27088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1587.349709][T27088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1587.450176][T27101] dvmrp5: entered allmulticast mode
[ 1587.561823][T27088] team0: Port device team_slave_0 added
[ 1587.633056][T27088] team0: Port device team_slave_1 added
[ 1587.711815][T27088] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1587.714423][T27088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1587.746367][T27088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1587.751795][T27088] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1587.760754][T27088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1587.783739][T27088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1587.873752][T27088] hsr_slave_0: entered promiscuous mode
[ 1587.876575][T27088] hsr_slave_1: entered promiscuous mode
[ 1587.900629][T27088] debugfs: 'hsr0' already exists in 'hsr'
[ 1587.903922][T27088] Cannot create hsr debugfs directory
[ 1588.126943][T27088] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1588.144187][T27088] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1588.158250][T27088] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1588.168910][T27088] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1588.219217][T27113] macvlan1: entered promiscuous mode
[ 1588.261149][T27112] macvlan1: left promiscuous mode
[ 1588.437565][T27088] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1588.603972][T27088] 8021q: adding VLAN 0 to HW filter on device team0
[ 1588.645156][T23541] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1588.648276][T23541] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1588.692872][T11485] Bluetooth: hci2: command tx timeout
[ 1588.710413][T23541] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1588.713455][T23541] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1588.873656][T27088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1588.878049][T27088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1589.165567][T27088] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1589.602000][T27088] veth0_vlan: entered promiscuous mode
[ 1589.616648][T27088] veth1_vlan: entered promiscuous mode
[ 1589.702357][T27088] veth0_macvtap: entered promiscuous mode
[ 1589.708833][T27088] veth1_macvtap: entered promiscuous mode
[ 1589.763411][T27088] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1589.787349][T27088] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1589.848558][ T5880] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1589.856049][ T5880] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1589.859655][ T5880] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1589.892301][ T5880] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1590.158704][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1590.175339][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1590.259979][ T3712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1590.263116][ T3712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1590.389837][T27172] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 4, id = 0
[ 1590.445302][   T33] audit: type=1800 audit(1758317163.496:38): pid=27174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.29452" name=F8FFFFFF dev="tmpfs" ino=18 res=0 errno=0
[ 1590.772807][T11485] Bluetooth: hci2: command tx timeout
[ 1591.274617][T27199] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:0
[ 1592.549089][ T5880] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1592.589109][ T5880] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1592.649132][ T5880] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1592.721491][ T5880] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1592.855338][T11485] Bluetooth: hci2: command tx timeout
[ 1592.913946][ T5880] bridge_slave_1: left allmulticast mode
[ 1592.916238][ T5880] bridge_slave_1: left promiscuous mode
[ 1592.929881][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1592.983088][ T5880] bridge_slave_0: left allmulticast mode
[ 1592.992621][ T5880] bridge_slave_0: left promiscuous mode
[ 1592.999751][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1593.083203][T27236] delete_channel: no stack
[ 1593.163497][T27274] ubi: mtd0 is already attached to ubi0
[ 1593.448619][T27278] can: request_module (can-proto-5) failed.
[ 1594.278349][ T5880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1594.288524][ T5880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1594.295817][ T5880] bond0 (unregistering): Released all slaves
[ 1594.935667][T11485] Bluetooth: hci2: command tx timeout
[ 1595.204505][ T5880] hsr_slave_0: left promiscuous mode
[ 1595.208228][ T5880] hsr_slave_1: left promiscuous mode
[ 1595.214232][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1595.217560][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1595.242720][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1595.245966][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1595.267020][T27324] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001
[ 1595.279734][ T5880] veth1_macvtap: left promiscuous mode
[ 1595.293063][ T5880] veth0_macvtap: left promiscuous mode
[ 1595.295387][ T5880] veth1_vlan: left promiscuous mode
[ 1595.297630][ T5880] veth0_vlan: left promiscuous mode
[ 1595.569698][ T5880] pim6reg9 (unregistering): left allmulticast mode
[ 1595.589627][ T5880] pimreg3 (unregistering): left allmulticast mode
[ 1596.859699][ T5880] team0 (unregistering): Port device team_slave_1 removed
[ 1596.981936][ T5880] team0 (unregistering): Port device team_slave_0 removed
[ 1598.388747][ T5880] IPVS: stop unused estimator thread 0...
[ 1598.734178][T27405] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20002
[ 1598.808430][T27405] bond_slave_0: entered promiscuous mode
[ 1599.022971][T27381] bond_slave_0: left promiscuous mode
[ 1600.706097][T27461] IPVS: set_ctl: invalid protocol: 136 172.20.20.48:20004
[ 1600.783869][T23377] IPVS: starting estimator thread 0...
[ 1600.909906][T27465] IPVS: using max 37 ests per chain, 88800 per kthread
[ 1601.859356][   T33] audit: type=1804 audit(1758317174.906:39): pid=27485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.29557" name="/newroot/640/bus" dev="tmpfs" ino=3306 res=1 errno=0
[ 1602.537088][T27504] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1607.338663][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.340901][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[ 1607.448147][T27608] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20004
[ 1607.622616][T27618] delete_channel: no stack
[ 1608.534309][T27628] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1608.547961][T27628] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1608.558837][T27628] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1608.568905][T27628] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1608.590701][T27628] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1609.921492][T11485] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1610.610017][T24483] Bluetooth: hci0: command 0x0406 tx timeout
[ 1610.612585][T11485] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1611.801801][T27769] dvmrp5: entered allmulticast mode
[ 1611.812452][T27769] pimreg: entered allmulticast mode
[ 1612.238792][T27790] delete_channel: no stack
[ 1612.694831][T11485] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1614.777709][T11485] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1617.205335][T27968] pimreg: left allmulticast mode
[ 1617.208873][T27968] dvmrp5: left allmulticast mode
[ 1617.623069][   T33] audit: type=1800 audit(1758317190.676:40): pid=27980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.29691" name=F8FFFFFF dev="tmpfs" ino=3580 res=0 errno=0
[ 1618.013745][T27995] delete_channel: no stack
[ 1619.681601][T28035] delete_channel: no stack
[ 1621.812510][T28096] delete_channel: no stack
[ 1622.332013][T28131] bridge0: entered allmulticast mode
[ 1622.345982][T28131] pim6reg: entered allmulticast mode
[ 1622.348642][T28131] pim6reg: left allmulticast mode
[ 1622.351703][T28131] bridge0: left allmulticast mode
[ 1624.256787][T28212] IPVS: set_ctl: invalid protocol: 43 172.20.20.37:20001
[ 1629.766222][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.769554][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.799929][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.802850][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.829942][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.832860][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.835523][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.869916][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.873195][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.876008][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.878770][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.905310][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.908111][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.913279][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.921645][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.924255][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.926921][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.960737][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.963674][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.966258][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.968955][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.980276][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1629.999968][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.003069][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.015957][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.018927][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.036476][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.039245][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.062369][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.064974][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.074788][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.077604][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.081150][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.084125][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.087055][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.101919][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.104678][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.107318][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.110581][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.113532][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.116369][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.118973][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.122450][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.125435][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.128313][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.132311][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.134913][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.137779][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.142633][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.145508][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.148697][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.152357][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.154948][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.157782][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.161072][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.164265][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.167523][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.170966][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.173701][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.176525][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.179405][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.182963][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.185697][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.188392][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.204184][T28356] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002
[ 1630.237786][T28362] pim6reg: entered allmulticast mode
[ 1630.273393][T28362] pim6reg: left allmulticast mode
[ 1630.354960][T28366] syz_tun: entered allmulticast mode
[ 1630.366841][T28366] dvmrp8: entered allmulticast mode
[ 1630.610386][T28361] syz_tun: left allmulticast mode
[ 1630.612667][T28361] dvmrp8: left allmulticast mode
[ 1631.175011][T28384] dvmrp5: left allmulticast mode
[ 1632.191542][T28413] delete_channel: no stack
[ 1632.364225][T28419] ubi: mtd0 is already attached to ubi0
[ 1632.519323][T28425] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:1
[ 1635.079435][T28467] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:1
[ 1636.050304][T28502] delete_channel: no stack
[ 1636.108885][T28507] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000
[ 1636.173399][T28508] IPVS: Unknown mcast interface: netpci0
[ 1638.000163][T28556] macvtap0: entered promiscuous mode
[ 1638.003862][T28556] macvtap0: left promiscuous mode
[ 1638.153019][T28560] macvlan1: entered promiscuous mode
[ 1638.156239][T28559] macvlan1: left promiscuous mode
[ 1638.211076][T28562] veth0: entered promiscuous mode
[ 1638.313041][T28561] veth0: left promiscuous mode
[ 1638.447326][T28574] delete_channel: no stack
[ 1638.647196][T28576] delete_channel: no stack
[ 1639.014722][T28599] delete_channel: no stack
[ 1639.668117][T28616] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:1
[ 1640.271318][T28636] delete_channel: no stack
[ 1641.818320][T28698] veth0_to_bridge: entered promiscuous mode
[ 1641.917409][T28697] veth0_to_bridge: left promiscuous mode
[ 1643.248796][T28759] ipvlan0: entered promiscuous mode
[ 1644.066584][T28758] ipvlan0: left promiscuous mode
[ 1644.697133][T28796] syzkaller0: entered promiscuous mode
[ 1644.711014][T28795] syzkaller0: left promiscuous mode
[ 1644.720749][T28794] dvmrp1: left allmulticast mode
[ 1645.171506][T28814] delete_channel: no stack
[ 1645.413840][T28822] random: crng reseeded on system resumption
[ 1646.549027][T28851] ubi: mtd0 is already attached to ubi0
[ 1647.392634][T28881] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:1
[ 1648.560018][T28899] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:1
[ 1651.069475][T28969] dvmrp5: entered allmulticast mode
[ 1651.074362][T28969] dvmrp5: left allmulticast mode
[ 1654.190697][T29078] delete_channel: no stack
[ 1657.439740][T29156] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001
[ 1664.359999][T29356] gretap0: entered promiscuous mode
[ 1664.362858][T29355] gretap0: left promiscuous mode
[ 1664.676301][T29367] random: crng reseeded on system resumption
[ 1665.535092][T29370] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1665.538284][T29370] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1665.541449][T29370] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1667.011429][T11485] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1667.170612][ T5947] delete_channel: no stack
[ 1667.585772][T11485] Bluetooth: hci0: command 0x0406 tx timeout
[ 1667.587234][T24483] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1668.775035][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.777657][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.839740][T29540] binder: 29539:29540 ioctl c00c620f 200000000100 returned -22
[ 1671.095025][T29588] veth1_to_bond: entered allmulticast mode
[ 1671.104025][T29587] veth1_to_bond: left allmulticast mode
[ 1671.720873][T29623] veth0: entered promiscuous mode
[ 1671.723597][T29623] veth0: left promiscuous mode
[ 1673.707641][T29706] vlan0: entered promiscuous mode
[ 1674.485407][T29699] vlan0: left promiscuous mode
[ 1674.692392][T29718] ipvlan0: entered promiscuous mode
[ 1674.698527][T29717] ipvlan0: left promiscuous mode
[ 1674.846922][T29731] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20003
[ 1674.858412][T29732] binder: 29729:29732 ioctl c0306201 200000000100 returned -14
[ 1682.480697][T29914] dvmrp5: entered allmulticast mode
[ 1682.496144][T29914] dvmrp5: left allmulticast mode
[ 1682.619659][T29907] delete_channel: no stack
[ 1682.887920][T29930] bridge0: entered promiscuous mode
[ 1683.027011][T29933] binder: binder_mmap: 29931 200000000000-200000b36000 bad vm_flags failed -1
[ 1683.096412][T29921] bridge0: left promiscuous mode
[ 1686.544256][T30023] binder: 30022:30023 ioctl 8933 200000000040 returned -22
[ 1686.561824][T30023] binder: 30022:30023 ioctl c018620b 200000000100 returned -14
[ 1687.709609][T30069] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0
[ 1687.714020][T30067] IPVS: stopping backup sync thread 30069 ...
[ 1688.550492][T30071] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1688.553437][T30071] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1688.556289][T30071] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1688.703346][T30094] delete_channel: no stack
[ 1688.723115][T30096] dvmrp0: entered allmulticast mode
[ 1689.466780][T30106] can: request_module (can-proto-0) failed.
[ 1689.810073][T24483] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1689.912985][T30129] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[ 1689.932849][T30124] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[ 1690.586240][T30143] veth0: entered promiscuous mode
[ 1690.601447][T30142] veth0: left promiscuous mode
[ 1690.612409][T24483] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1690.612463][T11485] Bluetooth: hci0: command 0x0406 tx timeout
[ 1691.164125][T30165] dvmrp0: left allmulticast mode
[ 1692.715192][T30203] cgroup: fork rejected by pids controller in /syz5
[ 1693.722351][T30662] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004
[ 1699.637615][   T33] audit: type=1804 audit(1758317272.686:41): pid=30803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.30463" name="/newroot/292/bus" dev="tmpfs" ino=1518 res=1 errno=0
[ 1701.714861][T30851] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0
[ 1704.369394][T30898] veth0_to_bridge: entered promiscuous mode
[ 1704.376919][T30897] veth0_to_bridge: left promiscuous mode
[ 1705.957482][T30939] dvmrp5: entered allmulticast mode
[ 1706.476416][   T33] audit: type=1800 audit(1758317279.526:42): pid=30953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.30518" name=F8FFFFFF dev="tmpfs" ino=13171 res=0 errno=0
[ 1708.515662][T30992] delete_channel: no stack
[ 1713.375171][T31116] binder: 31115:31116 ioctl c00c620f 200000000100 returned -22
[ 1713.808153][T31119] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:20004
[ 1714.609194][T31155] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001
[ 1722.981085][T31370] veth0: entered promiscuous mode
[ 1723.621300][T31370] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20001
[ 1723.768244][T31369] veth0: left promiscuous mode
[ 1724.908328][T31416] ubi0: detaching mtd0
[ 1724.936571][T31416] ubi0: mtd0 is detached
[ 1725.224872][T31434] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003
[ 1725.441327][T31452] macvtap0: entered promiscuous mode
[ 1725.457416][T31451] macvtap0: left promiscuous mode
[ 1725.784867][T31475] delete_channel: no stack
[ 1726.951893][T31505] IPVS: set_ctl: invalid protocol: 44 172.30.1.6:20004
[ 1727.195509][T31516] geneve0: entered promiscuous mode
[ 1727.223055][T31515] geneve0: left promiscuous mode
[ 1727.607024][T31532] binder: 31531:31532 ioctl c018620b 200000000100 returned -14
[ 1729.535192][T31594] delete_channel: no stack
[ 1730.237163][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.240283][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[ 1730.361326][T31621] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20004
[ 1734.395091][T31727] syz_tun: entered promiscuous mode
[ 1734.397756][T31726] syz_tun: left promiscuous mode
[ 1738.459546][T31850] delete_channel: no stack
[ 1738.758897][T31856] delete_channel: no stack
[ 1738.763010][T31856] delete_channel: no stack
[ 1740.211733][T31900] delete_channel: no stack
[ 1741.524377][T31942] IPVS: Unknown mcast interface: N!
[ 1741.724019][   T33] audit: type=1800 audit(1758317314.776:43): pid=31946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.30853" name=F8FFFFFF dev="tmpfs" ino=13741 res=0 errno=0
[ 1744.978506][T32053] comedi comedi4: comedi_config --init_data is deprecated
[ 1745.995954][T32078] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1751.108677][T32223] vlan0: entered promiscuous mode
[ 1751.333148][T32222] vlan0: left promiscuous mode
[ 1752.382002][T32269] lo: entered promiscuous mode
[ 1752.386017][T32268] lo: left promiscuous mode
[ 1752.473199][T32271] dummy0: entered allmulticast mode
[ 1752.510490][T32272] dummy0: left allmulticast mode
[ 1757.209860][T32406] random: crng reseeded on system resumption
[ 1757.370145][T32410] lo: entered promiscuous mode
[ 1757.383216][T32407] lo: left promiscuous mode
[ 1758.262655][T32422] dummy0: entered allmulticast mode
[ 1758.265260][T32422] dummy0: left allmulticast mode
[ 1759.875129][T32455] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20001
[ 1761.231882][T32506] lo: entered promiscuous mode
[ 1761.426086][T32505] lo: left promiscuous mode
[ 1767.014338][T32590] delete_channel: no stack
[ 1768.233200][T32616] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20002
[ 1770.402014][T32666] macvlan1: entered promiscuous mode
[ 1770.407491][T32665] macvlan1: left promiscuous mode
[ 1770.729870][   T33] audit: type=1800 audit(1758317343.776:44): pid=32678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.31107" name="file1" dev="tmpfs" ino=2687 res=0 errno=0
[ 1772.311413][   T33] audit: type=1800 audit(1758317345.356:45): pid=32716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.31117" name=84 dev="tmpfs" ino=6198 res=0 errno=0
[ 1772.991076][T32738] syz_tun: entered allmulticast mode
[ 1773.238097][T32732] syz_tun: left allmulticast mode
[ 1773.395777][T32743] dvmrp5: entered allmulticast mode
[ 1775.064436][   T33] audit: type=1800 audit(1758317348.116:46): pid=331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.31149" name="file1" dev="tmpfs" ino=2754 res=0 errno=0
[ 1775.736320][  T323] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1775.739222][  T323] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1775.742604][  T323] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1777.009962][T11485] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1777.812251][T11485] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1777.813704][T24483] Bluetooth: hci0: command 0x0406 tx timeout
[ 1778.099531][  T449] pimreg: entered allmulticast mode
[ 1778.113004][  T449] pimreg: left allmulticast mode
[ 1778.117672][  T449] dvmrp5: left allmulticast mode
[ 1785.811012][  T659] dummy0: entered promiscuous mode
[ 1785.838206][  T659] dummy0: left promiscuous mode
[ 1786.458008][  T683] dvmrp5: entered allmulticast mode
[ 1787.539441][  T696] delete_channel: no stack
[ 1787.640061][  T693] delete_channel: no stack
[ 1788.676479][  T738] IPVS: set_ctl: invalid protocol: 103 10.1.1.2:20001
[ 1789.153666][  T745] vlan1: entered promiscuous mode
[ 1789.454023][  T741] vlan1: left promiscuous mode
[ 1789.974641][  T763] dvmrp1: entered allmulticast mode
[ 1791.197878][  T794] veth0: entered promiscuous mode
[ 1791.310654][  T793] veth0: left promiscuous mode
[ 1791.666801][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.669421][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[ 1793.173105][  T852] macvlan1: entered promiscuous mode
[ 1793.323477][  T841] macvlan1: left promiscuous mode
[ 1793.745097][  T870] hsr0: entered promiscuous mode
[ 1793.830517][  T869] hsr0: left promiscuous mode
[ 1795.505158][  T910] vlan0: entered promiscuous mode
[ 1795.522542][  T908] vlan0: left promiscuous mode
[ 1797.941851][  T977] binder: 976:977 ioctl c018620c 200000000100 returned -22
[ 1799.475065][ T1045] syz_tun: entered allmulticast mode
[ 1799.900912][ T1040] syz_tun: left allmulticast mode
[ 1802.469629][ T1138] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[ 1803.944529][ T1188] IPVS: set_ctl: invalid protocol: 103 172.30.0.6:20002
[ 1807.538968][ T1285] veth0_to_bridge: entered promiscuous mode
[ 1807.554787][ T1284] veth0_to_bridge: left promiscuous mode
[ 1808.323419][ T1324] delete_channel: no stack
[ 1808.785111][ T1349] IPVS: set_ctl: invalid protocol: 116 172.20.20.170:20004
[ 1811.817469][ T1888] veth0: entered promiscuous mode
[ 1811.840493][ T1887] veth0: left promiscuous mode
[ 1814.776314][ T1957] dvmrp5: left allmulticast mode
[ 1816.013555][ T1982] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20004
[ 1816.539012][ T1996] delete_channel: no stack
[ 1816.552801][ T1998] delete_channel: no stack
[ 1817.153567][ T2013] vlan0: entered promiscuous mode
[ 1817.163900][ T2012] vlan0: left promiscuous mode
[ 1820.746933][ T2127] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[ 1820.750542][ T2126] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[ 1821.075289][ T2142] dvmrp1: left allmulticast mode
[ 1821.077522][ T2142] dvmrp5: left allmulticast mode
[ 1822.136070][ T2174] macvlan1: entered promiscuous mode
[ 1822.146732][ T2173] macvlan1: left promiscuous mode
[ 1828.102400][ T2250] IPVS: Scheduler module ip_vs_ not found
[ 1831.667360][ T2357] macvtap0: entered promiscuous mode
[ 1831.677549][ T2357] macvtap0: left promiscuous mode
[ 1831.907143][ T2356] delete_channel: no stack
[ 1832.361634][ T2372] delete_channel: no stack
[ 1839.599585][ T2611] syz_tun: entered promiscuous mode
[ 1839.607359][ T2607] syz_tun: left promiscuous mode
[ 1841.133267][ T2649] binder: 2645:2649 ioctl c00c620f 200000000100 returned -22
[ 1842.443645][ T2716] binder: 2715:2716 ioctl 40046210 200000000100 returned -14
[ 1843.239291][ T2758] macvlan1: entered promiscuous mode
[ 1843.406849][ T2757] macvlan1: left promiscuous mode
[ 1843.686689][ T2780] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[ 1843.696798][ T2779] IPVS: stopping master sync thread 2780 ...
[ 1845.532636][ T2838] erspan0: entered promiscuous mode
[ 1845.538160][ T2837] erspan0: left promiscuous mode
[ 1846.559171][ T2873] pim6reg: entered allmulticast mode
[ 1846.583142][ T2873] pim6reg: left allmulticast mode
[ 1850.358000][ T2982] gretap0: entered promiscuous mode
[ 1851.061932][ T2978] gretap0: left promiscuous mode
[ 1852.927005][ T3067] comedi comedi4: comedi_config --init_data is deprecated
[ 1853.113272][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.115973][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.237651][   T33] audit: type=1800 audit(1758317426.286:47): pid=3079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.31907" name=F8FFFFFF dev="tmpfs" ino=15427 res=0 errno=0
[ 1853.810359][ T3104] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[ 1855.088834][ T3122] IPVS: set_ctl: invalid protocol: 108 100.1.1.1:20004
[ 1857.470362][T29054] ------------[ cut here ]------------
[ 1857.473093][T29054] WARNING: io_uring/io_uring.c:3038 at io_ring_exit_work+0x4ed/0x930, CPU#1: kworker/u10:28/29054
[ 1857.477284][T29054] Modules linked in:
[ 1857.479121][T29054] CPU: 1 UID: 0 PID: 29054 Comm: kworker/u10:28 Not tainted syzkaller #0 PREEMPT(full) 
[ 1857.485089][T29054] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1857.489606][T29054] Workqueue: iou_exit io_ring_exit_work
[ 1857.492794][T29054] RIP: 0010:io_ring_exit_work+0x4ed/0x930
[ 1857.495250][T29054] Code: c6 05 2e b6 82 0e 01 48 c7 c7 80 aa 02 8c be 24 00 00 00 48 c7 c2 20 aa 02 8c e8 4e 30 72 00 e9 7b fe ff ff e8 c4 65 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1
[ 1857.503744][T29054] RSP: 0000:ffffc90003a2f8c0 EFLAGS: 00010293
[ 1857.506200][T29054] RAX: ffffffff812b782c RBX: 0000000100025fb6 RCX: ffff888106003a00
[ 1857.509415][T29054] RDX: 0000000000000000 RSI: fffffffffffffffa RDI: 0000000000000000
[ 1857.513443][T29054] RBP: ffffc90003a2fa50 R08: ffffc90003a2f847 R09: 1ffff92000745f08
[ 1857.516902][T29054] R10: dffffc0000000000 R11: fffff52000745f09 R12: 0000000100025fb0
[ 1857.520193][T29054] R13: ffff88803ff14310 R14: ffff88803ff14480 R15: dffffc0000000000
[ 1857.523546][T29054] FS:  0000000000000000(0000) GS:ffff8881a39dd000(0000) knlGS:0000000000000000
[ 1857.527399][T29054] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1857.530511][T29054] CR2: 000000110c253da6 CR3: 0000000111e66000 CR4: 00000000000006f0
[ 1857.533851][T29054] Call Trace:
[ 1857.535202][T29054]  <TASK>
[ 1857.536411][T29054]  ? __pfx_io_ring_exit_work+0x10/0x10
[ 1857.538622][T29054]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1857.541515][T29054]  ? process_scheduled_works+0x9ef/0x17b0
[ 1857.544001][T29054]  ? process_scheduled_works+0x9ef/0x17b0
[ 1857.546312][T29054]  process_scheduled_works+0xae1/0x17b0
[ 1857.548450][T29054]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1857.551232][T29054]  worker_thread+0x8a0/0xda0
[ 1857.553077][T29054]  kthread+0x711/0x8a0
[ 1857.554688][T29054]  ? __pfx_worker_thread+0x10/0x10
[ 1857.556782][T29054]  ? __pfx_kthread+0x10/0x10
[ 1857.558795][T29054]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1857.561266][T29054]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1857.563572][T29054]  ? __pfx_kthread+0x10/0x10
[ 1857.565578][T29054]  ret_from_fork+0x4bc/0x870
[ 1857.567372][T29054]  ? __pfx_ret_from_fork+0x10/0x10
[ 1857.569322][T29054]  ? __switch_to_asm+0x39/0x70
[ 1857.571296][T29054]  ? __switch_to_asm+0x33/0x70
[ 1857.573147][T29054]  ? __pfx_kthread+0x10/0x10
[ 1857.575103][T29054]  ret_from_fork_asm+0x1a/0x30
[ 1857.577161][T29054]  </TASK>
[ 1857.578453][T29054] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1857.581509][T29054] CPU: 1 UID: 0 PID: 29054 Comm: kworker/u10:28 Not tainted syzkaller #0 PREEMPT(full) 
[ 1857.585324][T29054] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1857.589480][T29054] Workqueue: iou_exit io_ring_exit_work
[ 1857.592045][T29054] Call Trace:
[ 1857.593567][T29054]  <TASK>
[ 1857.594771][T29054]  dump_stack_lvl+0x99/0x250
[ 1857.596641][T29054]  ? __asan_memcpy+0x40/0x70
[ 1857.598479][T29054]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1857.600468][T29054]  ? __pfx__printk+0x10/0x10
[ 1857.602307][T29054]  vpanic+0x237/0x6d0
[ 1857.603849][T29054]  ? __pfx_vpanic+0x10/0x10
[ 1857.605673][T29054]  ? is_bpf_text_address+0x292/0x2b0
[ 1857.607925][T29054]  ? is_bpf_text_address+0x26/0x2b0
[ 1857.610335][T29054]  panic+0xb9/0xc0
[ 1857.612044][T29054]  ? __pfx_panic+0x10/0x10
[ 1857.613982][T29054]  ? ret_from_fork_asm+0x1a/0x30
[ 1857.615902][T29054]  __warn+0x334/0x4c0
[ 1857.617572][T29054]  ? io_ring_exit_work+0x4ed/0x930
[ 1857.619809][T29054]  ? io_ring_exit_work+0x4ed/0x930
[ 1857.621888][T29054]  report_bug+0x2be/0x4f0
[ 1857.623757][T29054]  ? io_ring_exit_work+0x4ed/0x930
[ 1857.626006][T29054]  ? io_ring_exit_work+0x4ed/0x930
[ 1857.628290][T29054]  ? io_ring_exit_work+0x4ef/0x930
[ 1857.630479][T29054]  handle_bug+0x84/0x160
[ 1857.632214][T29054]  exc_invalid_op+0x1a/0x50
[ 1857.633897][T29054]  asm_exc_invalid_op+0x1a/0x20
[ 1857.635848][T29054] RIP: 0010:io_ring_exit_work+0x4ed/0x930
[ 1857.638352][T29054] Code: c6 05 2e b6 82 0e 01 48 c7 c7 80 aa 02 8c be 24 00 00 00 48 c7 c2 20 aa 02 8c e8 4e 30 72 00 e9 7b fe ff ff e8 c4 65 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1
[ 1857.646400][T29054] RSP: 0000:ffffc90003a2f8c0 EFLAGS: 00010293
[ 1857.648865][T29054] RAX: ffffffff812b782c RBX: 0000000100025fb6 RCX: ffff888106003a00
[ 1857.652279][T29054] RDX: 0000000000000000 RSI: fffffffffffffffa RDI: 0000000000000000
[ 1857.655689][T29054] RBP: ffffc90003a2fa50 R08: ffffc90003a2f847 R09: 1ffff92000745f08
[ 1857.658818][T29054] R10: dffffc0000000000 R11: fffff52000745f09 R12: 0000000100025fb0
[ 1857.661978][T29054] R13: ffff88803ff14310 R14: ffff88803ff14480 R15: dffffc0000000000
[ 1857.665318][T29054]  ? io_ring_exit_work+0x4ec/0x930
[ 1857.667822][T29054]  ? __pfx_io_ring_exit_work+0x10/0x10
[ 1857.670304][T29054]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1857.672484][T29054]  ? process_scheduled_works+0x9ef/0x17b0
[ 1857.674813][T29054]  ? process_scheduled_works+0x9ef/0x17b0
[ 1857.677132][T29054]  process_scheduled_works+0xae1/0x17b0
[ 1857.679421][T29054]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1857.682005][T29054]  worker_thread+0x8a0/0xda0
[ 1857.683993][T29054]  kthread+0x711/0x8a0
[ 1857.685719][T29054]  ? __pfx_worker_thread+0x10/0x10
[ 1857.687813][T29054]  ? __pfx_kthread+0x10/0x10
[ 1857.689736][T29054]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1857.691691][T29054]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1857.693792][T29054]  ? __pfx_kthread+0x10/0x10
[ 1857.695739][T29054]  ret_from_fork+0x4bc/0x870
[ 1857.697722][T29054]  ? __pfx_ret_from_fork+0x10/0x10
[ 1857.699753][T29054]  ? __switch_to_asm+0x39/0x70
[ 1857.701728][T29054]  ? __switch_to_asm+0x33/0x70
[ 1857.703871][T29054]  ? __pfx_kthread+0x10/0x10
[ 1857.705801][T29054]  ret_from_fork_asm+0x1a/0x30
[ 1857.707885][T29054]  </TASK>
[ 1857.710108][T29054] Kernel Offset: disabled
[ 1857.712048][T29054] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:30:30  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff88804b032fd8 RCX=e3113f2e2faccf00 RDX=0000000000000000
RSI=ffffffff8c03aac0 RDI=ffffffff8c03aa80 RBP=0000000000000000 RSP=ffffc90004a67eb8
R8 =ffffffff8fc45d37 R9 =1ffffffff1f88ba6 R10=dffffc0000000000 R11=fffffbfff1f88ba7
R12=0000000000000000 R13=0000000000000000 R14=ffffffff8ddeddd0 R15=dffffc0000000000
RIP=ffffffff81a6783a RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f75d93e3380 ffffffff 00c00000
GS =0000 ffff8880b83dd000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f75d9453408 CR3=00000001080b0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f XMM01=0000000000000000 0000ff00000000ff
XMM02=00ff000000000000 0000000000000000 XMM03=0000000000000000 000000000042494c
XMM04=6362696c5f5f0045 5441564952505f43 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006c RBX=000000000000006c RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003a2f070
R8 =ffff888021c48237 R9 =1ffff11004389046 R10=dffffc0000000000 R11=ffffffff85547170
R12=dffffc0000000000 R13=ffffffff99d38949 R14=ffffffff9a02d140 R15=0000000000000000
RIP=ffffffff855471ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a39dd000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c253da6 CR3=0000000111e66000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff8673a7498 00007ff8673a7470 XMM03=00007ff8673a74a8 00007ff8673a74a0
XMM04=00007ff867f0d100 00007ff8673a7460 XMM05=00007ff8673a7478 00007ff8673a74c0
XMM06=00007ff8673a74b8 00007ff8673a74b0 XMM07=00007ff8673a74a8 00007ff8673a74a0
XMM08=1cf4a88f28d62671 f9d293b8a381e009 XMM09=0000000000000000 00007ff867212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
